CVE-2024-40939

net: wwan: iosm: Fix tainted pointer delete is case of region creation fail

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: iosm: Fix tainted pointer delete is case of region creation fail

In case of region creation fail in ipc_devlink_create_region(), previously

created regions delete process starts from tainted pointer which actually

holds error code value.

Fix this bug by decreasing region index before delete.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Published
2024-07-12T12:25Z
EPSS history
Timeline
  • 12 JUL 12:25Z
    net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
    cvelistv5