QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-40909

Back to search

CVE-2024-40909

Published: Jul 12, 2024

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc afterward, which leads to a use-after-free as reported by syzbot. Actually, one of them should be sufficient, so just call one of them instead of both. Also add a WARN_ON() in case of any problematic implementation.

VendorProductVersions

Linux

Linux

affected
876941f533e7b47fc69977fc4551c02f2d18af97 - < 91cff53136daeff50816b0baeafd38a6976f6209
affected
1a80dbcb2dbaf6e4c216e62e30fa7d3daa8001ce - < fa97b8fed9896f1e89cb657513e483a152d4c382
affected
1a80dbcb2dbaf6e4c216e62e30fa7d3daa8001ce - < 2884dc7d08d98a89d8d65121524bb7533183a63a
affected
5d8d447777564b35f67000e7838e7ccb64d525c8
affected
6.6.26 - < 6.6.35

+1 more versions

Linux

Linux

affected
6.9
unaffected
0 - < 6.9
unaffected
6.6.35 - <= 6.6.*
unaffected
6.9.6 - <= 6.9.*
unaffected
6.10 - <= *

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now