Threats tagged 'ghsa-p92j-gfh9-4hjj'

CVE-2024-40938 is a medium severity vulnerability in the Linux kernel's landlock subsystem. It involves an incorrect handling of the d_parent pointer during a directory parent walk, which can trigger a WARN_ON_ONCE() warning when attempting to link a root mount point. The issue arises because the source directory's d_parent is used even when the source directory is a mount point, which is invalid. This flaw has been fixed by avoiding the use of the source directory's d_parent in such cases.