PT-2024-29158 · Linux+9 · Linux Kernel+9

Published

2024-05-13

·

Updated

2025-10-06

·

CVE-2024-40941

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises when the firmware sends a notification claiming to have more data than it actually has, causing the system to read past the allocated notification buffer. The print of the buffer has been removed, and its content can be viewed with tracing if needed. This was reported by KFENCE.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2024:5928
ALSA-2024:7000
ALSA-2024:7001
ALSA-2025_16880
BDU:2025-03402
CESA-2024_7000
CESA-2024_7001
CVE-2024-40941
DLA-4008-1
DSA-5730-1
DSA-5731-1
INFSA-2024_5928
INFSA-2024_7000
INFSA-2024_7001
OESA-2024-1894
OESA-2024-1895
OESA-2024-1896
OESA-2024-1897
OPENSUSE-SU-2024_2947-1
RHSA-2024:5928
RHSA-2024:7000
RHSA-2024:7001
RHSA-2024_5928
RHSA-2024_7000
RHSA-2024_7001
RLSA-2024:7001
SUSE-SU-2024:2892-1
SUSE-SU-2024:2894-1
SUSE-SU-2024:2901-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2940-1
SUSE-SU-2024:2947-1
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3383-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-6999-1
USN-6999-2
USN-7003-1
USN-7003-2
USN-7003-3
USN-7003-4
USN-7003-5
USN-7004-1
USN-7005-1
USN-7005-2
USN-7006-1
USN-7007-1
USN-7007-2
USN-7007-3
USN-7008-1
USN-7009-1
USN-7009-2
USN-7019-1
USN-7029-1
USN-7069-1
USN-7069-2

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu