Riskcovery

CVE-2024-40938

landlock: Fix d_parent walk

State
Published
Severity
Not scored
Published
Jul 12, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

landlock: Fix d_parent walk

The WARN_ON_ONCE() in collect_domain_accesses() can be triggered when trying to link a root mount point. This cannot work in practice because this directory is mounted, but the VFS check is done after the call to security_path_link().

Do not use source directory's d_parent when the source directory is the mount point.

[mic: Fix commit message]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b91c3e4ea756b12b7d992529226edce1cfd854d7 to before b6e5e696435832b33e40775f060ef5c95f4fda1fAffected
  • b91c3e4ea756b12b7d992529226edce1cfd854d7 to before cc30d05b34f9a087a6928d09b131f7b491e9ab11Affected
  • b91c3e4ea756b12b7d992529226edce1cfd854d7 to before c7618c7b0b8c45bcef34410cc1d1e953eb17f8f6Affected
  • b91c3e4ea756b12b7d992529226edce1cfd854d7 to before 88da52ccd66e65f2e63a6c35c9dff55d448ef4dcAffected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.95 through 6.1.*Not affected
  • 6.6.35 through 6.6.*Not affected
  • 6.9.6 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.