CVE-2024-35975

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35975
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix transmit scheduler resource leak Inorder to support shaping and scheduling, Upon class creation Netdev driver allocates trasmit schedulers. The previous patch which added support for Round robin scheduling has a bug due to which driver is not freeing transmit schedulers post class deletion. This patch fixes the same.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7af5582ea67209a23e44be9a9612ba7897be1f47 Patch
https://git.kernel.org/stable/c/b34fe77a1b18654233e4e54b334fcaeddf487100 Patch
https://git.kernel.org/stable/c/bccb798e07f8bb8b91212fe8ed1e421685449076 Patch
https://git.kernel.org/stable/c/7af5582ea67209a23e44be9a9612ba7897be1f47 Patch
https://git.kernel.org/stable/c/b34fe77a1b18654233e4e54b334fcaeddf487100 Patch
https://git.kernel.org/stable/c/bccb798e07f8bb8b91212fe8ed1e421685449076 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
History

14 Jan 2025, 16:38

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/7af5582ea67209a23e44be9a9612ba7897be1f47 - () https://git.kernel.org/stable/c/7af5582ea67209a23e44be9a9612ba7897be1f47 - Patch
References () https://git.kernel.org/stable/c/b34fe77a1b18654233e4e54b334fcaeddf487100 - () https://git.kernel.org/stable/c/b34fe77a1b18654233e4e54b334fcaeddf487100 - Patch
References () https://git.kernel.org/stable/c/bccb798e07f8bb8b91212fe8ed1e421685449076 - () https://git.kernel.org/stable/c/bccb798e07f8bb8b91212fe8ed1e421685449076 - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/7af5582ea67209a23e44be9a9612ba7897be1f47 - () https://git.kernel.org/stable/c/7af5582ea67209a23e44be9a9612ba7897be1f47 -
References () https://git.kernel.org/stable/c/b34fe77a1b18654233e4e54b334fcaeddf487100 - () https://git.kernel.org/stable/c/b34fe77a1b18654233e4e54b334fcaeddf487100 -
References () https://git.kernel.org/stable/c/bccb798e07f8bb8b91212fe8ed1e421685449076 - () https://git.kernel.org/stable/c/bccb798e07f8bb8b91212fe8ed1e421685449076 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: octeontx2-pf: corrige la fuga de recursos del programador de transmisión. Para admitir la configuración y la programación, al crear la clase, el controlador Netdev asigna programadores de transmisión. El parche anterior que agregó soporte para la programación por turnos tiene un error debido a que el controlador no libera los programadores de transmisión después de la eliminación de la clase. Este parche soluciona lo mismo.

20 May 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 10:15

Updated : 2025-01-14 16:38

NVD link : CVE-2024-35975

Mitre link : CVE-2024-35975

CVE.ORG link : CVE-2024-35975

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other