CVE-2024-35792

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35792

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request.

References
Link Resource
https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 Patch Mailing List
https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 Patch Mailing List
https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be Patch Mailing List
https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 Patch Mailing List
https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 Patch Mailing List
https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be Patch Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*
History

05 Mar 2025, 17:39

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 - () https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 - Patch, Mailing List
References () https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 - () https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 - Patch, Mailing List
References () https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be - () https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be - Patch, Mailing List
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
CWE CWE-416

21 Nov 2024, 09:20

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: crypto: rk3288 - Arreglar el uso después de liberar en unprepare La llamada de unprepare debe realizarse antes de la llamada de finalización ya que esta última puede liberar la solicitud.
References () https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 - () https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 -
References () https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 - () https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 -
References () https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be - () https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be -

17 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-17 13:15

Updated : 2025-03-05 17:39

NVD link : CVE-2024-35792

Mitre link : CVE-2024-35792

CVE.ORG link : CVE-2024-35792

JSON object : View

Products Affected

linux

CWE
CWE-416

Use After Free