CVE-2024-40921

net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state

Pass the already obtained vlan group pointer to br_mst_vlan_set_state()

instead of dereferencing it again. Each caller has already correctly

dereferenced it for their context. This change is required for the

following suspicious RCU dereference fix. No functional changes

intended.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.2th percentile
Published
2024-07-12T12:25Z
EPSS history
Timeline
  • 12 JUL 12:25Z
    net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
    cvelistv5