CVE-2024-35951

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35951

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() Subject: [PATCH] drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() If some the pages or sgt allocation failed, we shouldn't release the pages ref we got earlier, otherwise we will end up with unbalanced get/put_pages() calls. We should instead leave everything in place and let the BO release function deal with extra cleanup when the object is destroyed, or let the fault handler try again next time it's called.

References
Link Resource
https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3 Patch
https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002 Patch
https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa Patch
http://www.openwall.com/lists/oss-security/2024/05/30/1 Mailing List
http://www.openwall.com/lists/oss-security/2024/05/30/2 Mailing List
https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3 Patch
https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002 Patch
https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
History

24 Sep 2025, 18:56

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3 - () https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3 - Patch
References () https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002 - () https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002 - Patch
References () https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa - () https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa - Patch
References () http://www.openwall.com/lists/oss-security/2024/05/30/1 - () http://www.openwall.com/lists/oss-security/2024/05/30/1 - Mailing List
References () http://www.openwall.com/lists/oss-security/2024/05/30/2 - () http://www.openwall.com/lists/oss-security/2024/05/30/2 - Mailing List
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:21

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/05/30/1 -
  • () http://www.openwall.com/lists/oss-security/2024/05/30/2 -
References () https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3 - () https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3 -
References () https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002 - () https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002 -
References () https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa - () https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa -

05 Nov 2024, 10:16

Type Values Removed Values Added
References
  • {'url': 'http://www.openwall.com/lists/oss-security/2024/05/30/1', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'http://www.openwall.com/lists/oss-security/2024/05/30/2', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

10 Jun 2024, 17:16

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/05/30/1 -
  • () http://www.openwall.com/lists/oss-security/2024/05/30/2 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/panfrost: corrige la ruta de error en panfrost_mmu_map_fault_addr() Asunto: [PATCH] drm/panfrost: corrige la ruta de error en panfrost_mmu_map_fault_addr() Si algunas páginas o la asignación de sgt fallaron, No deberíamos publicar la referencia de páginas que obtuvimos anteriormente, de lo contrario terminaremos con llamadas get/put_pages() desequilibradas. En su lugar, deberíamos dejar todo en su lugar y dejar que la función de liberación de BO se encargue de una limpieza adicional cuando se destruya el objeto, o dejar que el controlador de fallos lo intente nuevamente la próxima vez que se llame.

20 May 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 10:15

Updated : 2025-09-24 18:56

NVD link : CVE-2024-35951

Mitre link : CVE-2024-35951

CVE.ORG link : CVE-2024-35951

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo