CVE-2024-40921

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-40921
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-40921.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-40921
Downstream
Related
Published
2024-07-12T13:15:15Z
Modified
2025-09-17T15:44:50Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mst: pass vlan group directly to brmstvlansetstate

Pass the already obtained vlan group pointer to brmstvlansetstate() instead of dereferencing it again. Each caller has already correctly dereferenced it for their context. This change is required for the following suspicious RCU dereference fix. No functional changes intended.

References

Affected packages