Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-40985
CVE-2024-40985:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2024-40985 is a vulnerability in the Linux kernel's TCP Authentication Option (TCP-AO) implementation that was discovered in July 2024. The issue involves a memory leak in the net/tcp_ao subsystem when handling error paths during TCP-AO configuration (Kernel Git).
Technical details
The vulnerability was introduced alongside the TCPAOCMDFAOREQUIRED functionality in version 5 of the TCP-AO patches. Specifically, the issue occurs in the tcpaoinfocmd function where aoinfo was not properly freed on the error path when tcpaorequired_verify fails (Kernel Git). The bug was fixed by properly handling the error case and adding a goto statement to ensure proper cleanup (Red Hat).
Impact
The vulnerability has been assessed as having a Low severity impact. The issue could potentially lead to memory leaks in the kernel when configuring TCP Authentication Option settings (Red Hat).
Mitigation and workarounds
The issue has been fixed in multiple Linux kernel versions. Ubuntu has released patches for version 24.04 LTS (linux 6.8.0-44.44), and various other kernel variants including linux-aws, linux-azure, and linux-gcp have also been updated (Ubuntu). Users are advised to update their kernel to the patched versions.
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management