CVE-2024-40947 is a medium severity vulnerability in the Linux kernel's Integrity Measurement Architecture (IMA) subsystem. It involves blocking (sleeping) within an RCU read-side critical section due to a kmalloc call with GFP_KERNEL, which violates RCU constraints. This can cause a use-after-free (UAF) condition leading to kernel panic due to NULL pointer dereference. The issue was fixed by changing kmalloc calls within RCU read-side critical sections to use GFP_ATOMIC to prevent sleeping.