PT-2024-29195 · Linux+9 · Linux Kernel+9

Alexander Potapenko · Published 2024-06-05 · Updated 2026-05-26 · CVE-2024-40989

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the KVM (Kernel-based Virtual Machine) on arm64 architecture, where a dangling pointer to a redistributor region could be stored in a vcpu when tearing down the region. This could potentially lead to issues, but specific details about exploitation or affected devices are not provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-825

CWE-416

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

AZL-68217

BDU:2025-08056

CESA-2024_7000

CESA-2024_7001

CVE-2024-40989

DLA-4008-1

DSA-5731-1

INFSA-2024_7000

INFSA-2024_7001

INFSA-2024_9315

OESA-2025-1097

OPENSUSE-SU-2024_2947-1

RHSA-2024:11313

RHSA-2024:11482

RHSA-2024:11483

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024:9315

RHSA-2024_7000

RHSA-2024_7001

RHSA-2024_9315

RLSA-2024:7001

SUSE-SU-2024:2894-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2947-1

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7008-1

USN-7029-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2745

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40989.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-42110 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-53223 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-40965 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-57910 · Security Note
• https://ubuntu.com/security/CVE-2024-39507 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40990 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2902-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39482 · Security Note
• https://ubuntu.com/security/CVE-2024-40938 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40909 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-39471 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-39469 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40965 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-39503 · Vendor Advisory