Threats tagged 'ghsa-3w6x-jcm9-p8w3'

CVE-2024-40939 is a high-severity use-after-free vulnerability in the Linux kernel's net subsystem, specifically in the wwan iosm driver. The flaw occurs when region creation fails in ipc_devlink_create_region(), leading to a tainted pointer being used during the deletion process. This pointer actually holds an error code value, causing improper memory handling. The issue was identified by the Linux Verification Center and has been fixed by adjusting the region index before deletion.