[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-36979":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":76,"related":77,"reserved_at":9,"published_at":91,"modified_at":92,"state":93,"summary":94,"references_raw":103,"kevs":126,"epss":127,"epss_history":130,"metrics":388,"affected":394},"CVE-2024-36979","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mst: fix vlan use-after-free\n\nsyzbot reported a suspicious rcu usage[1] in bridge's mst code. While\nfixing it I noticed that nothing prevents a vlan to be freed while\nwalking the list from the same path (br forward delay timer). Fix the rcu\nusage and also make sure we are not accessing freed memory by making\nbr_mst_vlan_set_state use rcu read lock.\n\n[1]\n WARNING: suspicious RCU usage\n 6.9.0-rc6-syzkaller #0 Not tainted\n -----------------------------\n net/bridge/br_private.h:1599 suspicious rcu_dereference_protected() usage!\n ...\n stack backtrace:\n CPU: 1 PID: 8017 Comm: syz-executor.1 Not tainted 6.9.0-rc6-syzkaller #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024\n Call Trace:\n  \u003CIRQ>\n  __dump_stack lib/dump_stack.c:88 [inline]\n  dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114\n  lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712\n  nbp_vlan_group net/bridge/br_private.h:1599 [inline]\n  br_mst_set_state+0x1ea/0x650 net/bridge/br_mst.c:105\n  br_set_state+0x28a/0x7b0 net/bridge/br_stp.c:47\n  br_forward_delay_timer_expired+0x176/0x440 net/bridge/br_stp_timer.c:88\n  call_timer_fn+0x18e/0x650 kernel/time/timer.c:1793\n  expire_timers kernel/time/timer.c:1844 [inline]\n  __run_timers kernel/time/timer.c:2418 [inline]\n  __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2429\n  run_timer_base kernel/time/timer.c:2438 [inline]\n  run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2448\n  __do_softirq+0x2c6/0x980 kernel/softirq.c:554\n  invoke_softirq kernel/softirq.c:428 [inline]\n  __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633\n  irq_exit_rcu+0x9/0x30 kernel/softirq.c:645\n  instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]\n  sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043\n  \u003C/IRQ>\n  \u003CTASK>\n asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702\n RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5758\n Code: 2b 00 74 08 4c 89 f7 e8 ba d1 84 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 \u003C4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25\n RSP: 0018:ffffc90013657100 EFLAGS: 00000206\n RAX: 0000000000000001 RBX: 1ffff920026cae2c RCX: 0000000000000001\n RDX: dffffc0000000000 RSI: ffffffff8bcaca00 RDI: ffffffff8c1eaa60\n RBP: ffffc90013657260 R08: ffffffff92efe507 R09: 1ffffffff25dfca0\n R10: dffffc0000000000 R11: fffffbfff25dfca1 R12: 1ffff920026cae28\n R13: dffffc0000000000 R14: ffffc90013657160 R15: 0000000000000246",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74],{"_key":25},"SUSE-SU-2025:0255-1",{"_key":27},"SUSE-SU-2025:0262-1",{"_key":29},"SUSE-SU-2025:0263-1",{"_key":31},"SUSE-SU-2025:0265-1",{"_key":33},"SUSE-SU-2025:0268-1",{"_key":35},"SUSE-SU-2025:0269-1",{"_key":37},"SUSE-SU-2024:3194-1",{"_key":39},"SUSE-SU-2024:3195-1",{"_key":41},"SUSE-SU-2024:3383-1",{"_key":43},"SUSE-SU-2025:20044-1",{"_key":45},"SUSE-SU-2025:20047-1",{"_key":47},"MGASA-2024-0263",{"_key":49},"MGASA-2024-0266",{"_key":51},"UBUNTU-CVE-2024-36979",{"_key":53},"DEBIAN-CVE-2024-36979",{"_key":55},"RHSA-2024:5101",{"_key":57},"RHSA-2024:5102",{"_key":59},"RHSA-2024:6206",{"_key":61},"RHSA-2024:7489",{"_key":63},"RHSA-2024:7490",{"_key":65},"RHSA-2024:6567",{"_key":67},"USN-6949-1",{"_key":69},"USN-6949-2",{"_key":71},"USN-6952-1",{"_key":73},"USN-6952-2",{"_key":75},"USN-6955-1",[],[78,79,80,81,82,83,84,85,86,87,88,89,90],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},"2024-06-19T13:35:12.708Z","2026-05-11T20:18:22.377Z","Modified",{"cisa_kev":95,"cisa_ransomware":95,"cisa_vendor":9,"epss_severity":96,"epss_score":97,"severity":98,"severity_score":99,"severity_version":100,"severity_source":101,"severity_vector":102,"severity_status":93},false,"low",0.00022,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[104,110,114,118,122],{"url":105,"sources":106,"tags":108},"https://git.kernel.org/stable/c/8ca9a750fc711911ef616ceb627d07357b04545e",[107,101],"cve.org",[109],"Patch",{"url":111,"sources":112,"tags":113},"https://git.kernel.org/stable/c/4488617e5e995a09abe4d81add5fb165674edb59",[107,101],[109],{"url":115,"sources":116,"tags":117},"https://git.kernel.org/stable/c/a2b01e65d9ba8af2bb086d3b7288ca53a07249ac",[107,101],[109],{"url":119,"sources":120,"tags":121},"https://git.kernel.org/stable/c/e43dd2b1ec746e105b7db5f9ad6ef14685a615a4",[107,101],[109],{"url":123,"sources":124,"tags":125},"https://git.kernel.org/stable/c/3a7c1661ae1383364cd6092d851f5e5da64d476b",[107,101],[109],[],{"date":128,"score":97,"percentile":129},"2026-06-03",0.06296,[131,135,138,141,144,147,150,153,156,159,162,165,168,171,174,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,232,235,238,241,244,247,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,293,295,297,300,302,305,308,311,314,317,319,322,325,327,329,332,335,337,339,342,344,347,350,353,356,359,362,364,367,370,373,376,379,381,383,386],{"date":132,"score":133,"percentile":134},"2025-11-04",0.00017,0.03029,{"date":136,"score":133,"percentile":137},"2025-11-05",0.03054,{"date":139,"score":133,"percentile":140},"2025-11-06",0.03079,{"date":142,"score":133,"percentile":143},"2025-11-07",0.03084,{"date":145,"score":133,"percentile":146},"2025-11-08",0.0309,{"date":148,"score":133,"percentile":149},"2025-11-09",0.03094,{"date":151,"score":133,"percentile":152},"2025-11-10",0.03077,{"date":154,"score":133,"percentile":155},"2025-11-11",0.03098,{"date":157,"score":133,"percentile":158},"2025-11-12",0.03108,{"date":160,"score":133,"percentile":161},"2025-11-13",0.03139,{"date":163,"score":133,"percentile":164},"2025-11-14",0.03155,{"date":166,"score":133,"percentile":167},"2025-11-15",0.03183,{"date":169,"score":133,"percentile":170},"2025-11-16",0.0318,{"date":172,"score":133,"percentile":173},"2025-11-17",0.03169,{"date":175,"score":176,"percentile":177},"2025-11-18",0.00095,0.22792,{"date":179,"score":176,"percentile":180},"2025-11-19",0.22804,{"date":182,"score":176,"percentile":183},"2025-11-20",0.2281,{"date":185,"score":133,"percentile":186},"2025-11-21",0.0326,{"date":188,"score":133,"percentile":189},"2025-11-22",0.03262,{"date":191,"score":133,"percentile":192},"2025-11-23",0.03257,{"date":194,"score":133,"percentile":195},"2025-11-24",0.03243,{"date":197,"score":133,"percentile":198},"2025-11-25",0.03232,{"date":200,"score":133,"percentile":201},"2025-11-26",0.03229,{"date":203,"score":133,"percentile":204},"2025-11-27",0.03233,{"date":206,"score":133,"percentile":207},"2025-11-28",0.03235,{"date":209,"score":133,"percentile":210},"2025-11-29",0.03277,{"date":212,"score":133,"percentile":213},"2025-11-30",0.03281,{"date":215,"score":133,"percentile":216},"2025-12-01",0.03368,{"date":218,"score":133,"percentile":219},"2025-12-02",0.0337,{"date":221,"score":133,"percentile":222},"2025-12-03",0.03373,{"date":224,"score":133,"percentile":225},"2025-12-04",0.03302,{"date":227,"score":133,"percentile":228},"2025-12-05",0.03335,{"date":230,"score":133,"percentile":231},"2025-12-06",0.03352,{"date":233,"score":133,"percentile":234},"2025-12-07",0.03358,{"date":236,"score":133,"percentile":237},"2025-12-08",0.03356,{"date":239,"score":133,"percentile":240},"2025-12-09",0.03382,{"date":242,"score":133,"percentile":243},"2025-12-10",0.03426,{"date":245,"score":133,"percentile":246},"2025-12-11",0.03414,{"date":248,"score":133,"percentile":246},"2025-12-12",{"date":250,"score":133,"percentile":251},"2025-12-13",0.03406,{"date":253,"score":133,"percentile":254},"2025-12-14",0.03403,{"date":256,"score":133,"percentile":257},"2025-12-15",0.03387,{"date":259,"score":133,"percentile":260},"2025-12-16",0.03409,{"date":262,"score":133,"percentile":263},"2025-12-17",0.03429,{"date":265,"score":133,"percentile":266},"2025-12-18",0.03444,{"date":268,"score":133,"percentile":269},"2025-12-19",0.03432,{"date":271,"score":133,"percentile":272},"2025-12-20",0.03434,{"date":274,"score":133,"percentile":275},"2025-12-21",0.03456,{"date":277,"score":133,"percentile":278},"2025-12-22",0.03441,{"date":280,"score":133,"percentile":281},"2025-12-23",0.0345,{"date":283,"score":133,"percentile":284},"2025-12-24",0.03446,{"date":286,"score":133,"percentile":287},"2025-12-25",0.03461,{"date":289,"score":133,"percentile":290},"2025-12-26",0.03459,{"date":292,"score":133,"percentile":287},"2025-12-27",{"date":294,"score":133,"percentile":290},"2025-12-28",{"date":296,"score":133,"percentile":281},"2025-12-29",{"date":298,"score":133,"percentile":299},"2025-12-30",0.03433,{"date":301,"score":133,"percentile":243},"2025-12-31",{"date":303,"score":133,"percentile":304},"2026-01-01",0.03506,{"date":306,"score":133,"percentile":307},"2026-01-02",0.03497,{"date":309,"score":133,"percentile":310},"2026-01-03",0.03491,{"date":312,"score":133,"percentile":313},"2026-01-04",0.03391,{"date":315,"score":133,"percentile":316},"2026-01-05",0.03376,{"date":318,"score":133,"percentile":216},"2026-01-06",{"date":320,"score":133,"percentile":321},"2026-01-07",0.03394,{"date":323,"score":133,"percentile":324},"2026-01-08",0.03417,{"date":326,"score":133,"percentile":243},"2026-01-09",{"date":328,"score":133,"percentile":269},"2026-01-10",{"date":330,"score":133,"percentile":331},"2026-01-11",0.03416,{"date":333,"score":133,"percentile":334},"2026-01-12",0.03407,{"date":336,"score":133,"percentile":254},"2026-01-13",{"date":338,"score":133,"percentile":331},"2026-01-14",{"date":340,"score":133,"percentile":341},"2026-01-15",0.0338,{"date":343,"score":133,"percentile":219},"2026-01-16",{"date":345,"score":133,"percentile":346},"2026-01-17",0.03372,{"date":348,"score":133,"percentile":349},"2026-01-18",0.03364,{"date":351,"score":133,"percentile":352},"2026-01-19",0.03344,{"date":354,"score":133,"percentile":355},"2026-01-20",0.03334,{"date":357,"score":133,"percentile":358},"2026-01-21",0.0332,{"date":360,"score":133,"percentile":361},"2026-01-22",0.03324,{"date":363,"score":133,"percentile":346},"2026-01-23",{"date":365,"score":133,"percentile":366},"2026-01-24",0.03399,{"date":368,"score":133,"percentile":369},"2026-01-25",0.03381,{"date":371,"score":133,"percentile":372},"2026-01-26",0.03369,{"date":374,"score":133,"percentile":375},"2026-01-27",0.03351,{"date":377,"score":133,"percentile":378},"2026-01-28",0.03336,{"date":380,"score":133,"percentile":234},"2026-01-29",{"date":382,"score":133,"percentile":234},"2026-01-30",{"date":384,"score":133,"percentile":385},"2026-01-31",0.03362,{"date":387,"score":133,"percentile":284},"2026-02-01",[389],{"source":101,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":390,"cvss_v4_0":9},{"baseScore":99,"baseSeverity":391,"vectorString":102,"impactScore":392,"exploitabilityScore":393},"HIGH",9.8,4.6,[395,421],{"ecosystem":9,"name":396,"vendor":397,"product":397,"cpe_part":398,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":399},"Linux","linux","a",[400,407,410,413,416,419],{"version":401,"is_range":402,"range_type":107,"version_start":403,"version_start_type":404,"version_end":405,"version_end_type":406,"fixed_in":9},">= ec7328b59176227216c461601c6bd0e922232a9b, \u003C 8ca9a750fc711911ef616ceb627d07357b04545e",true,"ec7328b59176227216c461601c6bd0e922232a9b","including","8ca9a750fc711911ef616ceb627d07357b04545e","excluding",{"version":408,"is_range":402,"range_type":107,"version_start":403,"version_start_type":404,"version_end":409,"version_end_type":406,"fixed_in":9},">= ec7328b59176227216c461601c6bd0e922232a9b, \u003C 4488617e5e995a09abe4d81add5fb165674edb59","4488617e5e995a09abe4d81add5fb165674edb59",{"version":411,"is_range":402,"range_type":107,"version_start":403,"version_start_type":404,"version_end":412,"version_end_type":406,"fixed_in":9},">= ec7328b59176227216c461601c6bd0e922232a9b, \u003C a2b01e65d9ba8af2bb086d3b7288ca53a07249ac","a2b01e65d9ba8af2bb086d3b7288ca53a07249ac",{"version":414,"is_range":402,"range_type":107,"version_start":403,"version_start_type":404,"version_end":415,"version_end_type":406,"fixed_in":9},">= ec7328b59176227216c461601c6bd0e922232a9b, \u003C e43dd2b1ec746e105b7db5f9ad6ef14685a615a4","e43dd2b1ec746e105b7db5f9ad6ef14685a615a4",{"version":417,"is_range":402,"range_type":107,"version_start":403,"version_start_type":404,"version_end":418,"version_end_type":406,"fixed_in":9},">= ec7328b59176227216c461601c6bd0e922232a9b, \u003C 3a7c1661ae1383364cd6092d851f5e5da64d476b","3a7c1661ae1383364cd6092d851f5e5da64d476b",{"version":420,"is_range":95,"range_type":107,"version_start":420,"version_start_type":404,"version_end":420,"version_end_type":404,"fixed_in":9},"5.18",{"ecosystem":9,"name":422,"vendor":397,"product":423,"cpe_part":424,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":425},"linux kernel","linux_kernel","o",[426,430,434,438],{"version":427,"is_range":402,"range_type":428,"version_start":420,"version_start_type":404,"version_end":429,"version_end_type":406,"fixed_in":9},"gte5.18_lt6.1.93","cpe","6.1.93",{"version":431,"is_range":402,"range_type":428,"version_start":432,"version_start_type":404,"version_end":433,"version_end_type":406,"fixed_in":9},"gte6.2_lt6.6.33","6.2","6.6.33",{"version":435,"is_range":402,"range_type":428,"version_start":436,"version_start_type":404,"version_end":437,"version_end_type":406,"fixed_in":9},"gte6.7_lt6.8.12","6.7","6.8.12",{"version":439,"is_range":402,"range_type":428,"version_start":440,"version_start_type":404,"version_end":441,"version_end_type":406,"fixed_in":9},"gte6.9_lt6.9.3","6.9","6.9.3"]