CVE - CVE-2024-35847

CVE-ID
CVE-2024-35847	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when its_vpe_init() fails after successfully allocating at least one interrupt. This happens because its_vpe_irq_domain_free() frees the interrupts along with the area bitmap and the vprop_page and its_vpe_irq_domain_alloc() subsequently frees the area bitmap and the vprop_page again. Fix this by unconditionally invoking its_vpe_irq_domain_free() which handles all cases correctly and by removing the bitmap/vprop_page freeing from its_vpe_irq_domain_alloc(). [ tglx: Massaged change log ]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/03170e657f62c26834172742492a8cb8077ef792 URL:https://git.kernel.org/stable/c/03170e657f62c26834172742492a8cb8077ef792 MISC:https://git.kernel.org/stable/c/5b012f77abde89bf0be8a0547636184fea618137 URL:https://git.kernel.org/stable/c/5b012f77abde89bf0be8a0547636184fea618137 MISC:https://git.kernel.org/stable/c/5dbdbe1133911ca7d8466bb86885adec32ad9438 URL:https://git.kernel.org/stable/c/5dbdbe1133911ca7d8466bb86885adec32ad9438 MISC:https://git.kernel.org/stable/c/aa44d21574751a7d6bca892eb8e0e9ac68372e52 URL:https://git.kernel.org/stable/c/aa44d21574751a7d6bca892eb8e0e9ac68372e52 MISC:https://git.kernel.org/stable/c/b72d2b1448b682844f995e660b77f2a1fabc1662 URL:https://git.kernel.org/stable/c/b72d2b1448b682844f995e660b77f2a1fabc1662 MISC:https://git.kernel.org/stable/c/c26591afd33adce296c022e3480dea4282b7ef91 URL:https://git.kernel.org/stable/c/c26591afd33adce296c022e3480dea4282b7ef91 MISC:https://git.kernel.org/stable/c/dd681710ab77c8beafe2e263064cb1bd0e2d6ca9 URL:https://git.kernel.org/stable/c/dd681710ab77c8beafe2e263064cb1bd0e2d6ca9 MISC:https://git.kernel.org/stable/c/f5417ff561b8ac9a7e53c747b8627a7ab58378ae URL:https://git.kernel.org/stable/c/f5417ff561b8ac9a7e53c747b8627a7ab58378ae MLIST:[debian-lts-announce] 20240625 [SECURITY] [DLA 3842-1] linux-5.10 security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Assigning CNA
kernel.org
Date Record Created
20240517	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240517)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)