CVE-2024-40920

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to suspicious RCU usage in the br mst set state function, which could lead to a use-after-free error. This was caused by converting br mst set state to RCU without changing the vlan group dereference helper. The problem is fixed by switching to the vlan group RCU deref helper. An attacker could potentially exploit this issue to elevate privileges in the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.