CVE - CVE-2024-35848

CVE-ID
CVE-2024-35848	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered, the read will fail, and the device will be torn down. If another driver accesses the nvmem device after the teardown, it will reference invalid memory. Move the failure point before registering the nvmem device.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/26d32bec4c6d255a03762f33c637bfa3718be15a URL:https://git.kernel.org/stable/c/26d32bec4c6d255a03762f33c637bfa3718be15a MISC:https://git.kernel.org/stable/c/2af84c46b9b8f2d6c0f88d09ee5c849ae1734676 URL:https://git.kernel.org/stable/c/2af84c46b9b8f2d6c0f88d09ee5c849ae1734676 MISC:https://git.kernel.org/stable/c/6d8b56ec0c8f30d5657382f47344a32569f7a9bc URL:https://git.kernel.org/stable/c/6d8b56ec0c8f30d5657382f47344a32569f7a9bc MISC:https://git.kernel.org/stable/c/c43e5028f5a35331eb25017f5ff6cc21735005c6 URL:https://git.kernel.org/stable/c/c43e5028f5a35331eb25017f5ff6cc21735005c6 MISC:https://git.kernel.org/stable/c/c850f71fca09ea41800ed55905980063d17e01da URL:https://git.kernel.org/stable/c/c850f71fca09ea41800ed55905980063d17e01da MISC:https://git.kernel.org/stable/c/f42c97027fb75776e2e9358d16bf4a99aeb04cf2 URL:https://git.kernel.org/stable/c/f42c97027fb75776e2e9358d16bf4a99aeb04cf2 MLIST:[debian-lts-announce] 20240627 [SECURITY] [DLA 3843-1] linux-5.10 security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html
Assigning CNA
kernel.org
Date Record Created
20240517	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240517)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)