CVE-2024-40954

Medium

Published: —Translated: 07/08/2026(UTC)NVD NIST

Summary

In the Linux kernel's networking subsystem, a dangling sk pointer is left when socket creation fails, potentially leading to use-after-free when __sock_release() is called with an fentry probe.

Risk Assessment

Use-after-free could allow a local attacker to execute arbitrary code in kernel context or cause a system crash.

Recommendation

Update the Linux kernel to a patched version and avoid running unverified BPF programs.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: net: do not leave a dangling sk pointer, when socket creation fails It is possible to trigger a use-after-free by: * attaching an fentry probe to __sock_release() and the probe calling the bpf_get_socket_cookie() helper *