Double Free in Linux

CVE-2024-40940

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow rule creation fail in mlx5_lag_create_port_sel_table(), instead of previously created rules, the tainted pointer is deleted deveral times. Fix this bug by using correct flow rules pointers. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Vulnerability class: Double Free

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.003 (15.9th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 16th percentile — 15.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2024-40940: held from 0.003 to 0.003.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000

Affected products

  • Linux — versions 352899f384d4aefa77ede6310d08c1b515612a8f, 5.19, 0
  • Linux Kernel — versions 6.10

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2024-40940?
CVE-2024-40940 is a high-severity vulnerability in Linux, classified under Double Free. CVSS score: 7.8/10. Published 2024-07-12.
How severe is CVE-2024-40940?
High severity. CVSS v3 base score is 7.8 out of 10.