CVE-2024-40937

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gve: Clear napi->skb before dev_kfree_skb_any()

gve_rx_free_skb incorrectly leaves napi->skb referencing an skb after it is freed with dev_kfree_skb_any(). This can result in a subsequent call to napi_get_frags returning a dangling pointer.

Fix this by clearing napi->skb before the skb is freed.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 9b8dd5e5ea48bbb7532d20c4093a79d8283e4029, < 75afd8724739ee5ed8165acde5f6ac3988b485cc; >= 9b8dd5e5ea48bbb7532d20c4093a79d8283e4029, < d221284991118c0ab16480b53baecd857c0bc442; >= 9b8dd5e5ea48bbb7532d20c4093a79d8283e4029, < 2ce5341c36993b776012601921d7688693f8c037; >= 9b8dd5e5ea48bbb7532d20c4093a79d8283e4029, < a68184d5b420ea4fc7e6b7ceb52bbc66f90d3c50; >= 9b8dd5e5ea48bbb7532d20c4093a79d8283e4029, < 6f4d93b78ade0a4c2cafd587f7b429ce95abb02e
LinuxLinux5.14

References

Timeline

Published
Jul 12, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-409385.5In the Linux kernel, the following vulnerability has been resolved: landlock: Fix d_parent walk The WARN_ON_ONCE() in collect_domain_accesCVE-2024-409397.8In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation CVE-2024-40945.4The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high priviCVE-2024-409407.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation faiCVE-2024-409415.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case theCVE-2024-409425.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp codCVE-2024-409434.7In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix races between hole punching and AIO+DIO After commit "ocfs2CVE-2024-409445.5In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to cc_platform_haCVE-2024-409455.5In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_deCVE-2024-409475.5In the Linux kernel, the following vulnerability has been resolved: ima: Avoid blocking in RCU read-side critical section A panic happens CVE-2024-409485.5In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: fix crash on ZONE_DEVICE Not all pages may apply CVE-2024-409495.5In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio W
CVE-2024-40937: Medium severity, CVSS 5.5 | Vulnix