CVE-2024-40938

landlock: Fix d_parent walk

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

landlock: Fix d_parent walk

The WARN_ON_ONCE() in collect_domain_accesses() can be triggered when

trying to link a root mount point. This cannot work in practice because

this directory is mounted, but the VFS check is done after the call to

security_path_link().

Do not use source directory's d_parent when the source directory is the

mount point.

[mic: Fix commit message]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.5th percentile
Published
2024-07-12T12:25Z
EPSS history
Timeline
  • 12 JUL 12:25Z
    landlock: Fix d_parent walk
    cvelistv5