CVE-2024-40939

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a tainted pointer delete in the case of region creation failure in the ipc devlink create region() function. When region creation fails, the delete process for previously created regions starts from a tainted pointer that holds an error code value. This bug has been fixed by decreasing the region index before deletion. The Linux Verification Center (linuxtesting.org) with SVACE found this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.