Threats tagged 'ghsa-5c2v-7jgp-gfhr'

CVE-2024-40920 is a high-severity vulnerability in the Linux kernel's network bridge module related to Multiple Spanning Tree (MST) protocol handling. It involves suspicious Read-Copy-Update (RCU) usage in the function br_mst_set_state, which could lead to a VLAN use-after-free condition. This flaw was addressed by converting br_mst_set_state to use RCU properly and updating the VLAN group dereference helper accordingly.