First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-40936

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Fix memregion leaks in devm_cxl_add_region()

Move the mode verification to __create_region() before allocating the memregion to avoid the memregion leaks.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= 6e099264185d05f50400ea494f5029264a4fe995, < d8316838aa0686da63a8be4194b7a17b0103ae4a; >= 6e099264185d05f50400ea494f5029264a4fe995, < bbb5d8746381c82f7e0fb6171094d375b492f266; >= 6e099264185d05f50400ea494f5029264a4fe995, < 49ba7b515c4c0719b866d16f068e62d16a8a3dd1
Linux	Linux	6.3

References

Timeline

Published: Jul 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-409375.5In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gve_rx_free_skb incorr CVE-2024-409385.5In the Linux kernel, the following vulnerability has been resolved: landlock: Fix d_parent walk The WARN_ON_ONCE() in collect_domain_acces CVE-2024-409397.8In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation CVE-2024-40945.4The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privi CVE-2024-409407.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fai CVE-2024-409415.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the CVE-2024-409425.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp cod CVE-2024-409434.7In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix races between hole punching and AIO+DIO After commit "ocfs2 CVE-2024-409445.5In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to cc_platform_ha CVE-2024-409455.5In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_de CVE-2024-409475.5In the Linux kernel, the following vulnerability has been resolved: ima: Avoid blocking in RCU read-side critical section A panic happens CVE-2024-409485.5In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: fix crash on ZONE_DEVICE Not all pages may apply

CVE-2024-40936: Medium severity, CVSS 5.5 | Vulnix