PT-2024-29155 · Linux+7 · Linux Kernel+7

Published 2024-06-04 · Updated 2025-09-29 · CVE-2024-40939

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a tainted pointer delete in the case of region creation failure in the ipc devlink create region() function. When region creation fails, the delete process for previously created regions starts from a tainted pointer that holds an error code value. This bug has been fixed by decreasing the region index before deletion. The Linux Verification Center (linuxtesting.org) with SVACE found this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

RCE

Weakness Enumeration

CWE-416

CWE-20

Related Identifiers

ALSA-2024:5928

ALSA-2025_16880

BDU:2025-03400

CVE-2024-40939

DLA-4008-1

DSA-5731-1

INFSA-2024_5928

OESA-2024-2076

RHSA-2024:5928

RHSA-2024_5928

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7008-1

USN-7029-1

Affected Products

Almalinux

Astra Linux

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 1389

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40939.json · Exploit
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41030 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39504 · Security Note
• https://ubuntu.com/security/CVE-2024-38780 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42230 · Security Note
• https://ubuntu.com/security/CVE-2024-38622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41087 · Security Note
• https://ubuntu.com/security/CVE-2024-39489 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7029-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41054 · Security Note
• https://ubuntu.com/security/CVE-2024-39500 · Vendor Advisory