CVE-2024-40940

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-40940
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-40940.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-40940
Downstream
Related
Published
2024-07-12T13:15:16Z
Modified
2025-09-17T15:01:01Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix tainted pointer delete is case of flow rules creation fail

In case of flow rule creation fail in mlx5lagcreateportsel_table(), instead of previously created rules, the tainted pointer is deleted deveral times. Fix this bug by using correct flow rules pointers.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

References

Affected packages