Riskcovery

CVE-2024-35792

crypto: rk3288 - Fix use after free in unprepare

State
Published
Severity
7.8 High
Published
May 17, 2024
Updated
Aug 5, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: rk3288 - Fix use after free in unprepare

The unprepare call must be carried out before the finalize call as the latter can free the request.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c66c17a0f69b0e017bbc01d999a28ed96ee84826 to before 48dd260fdb728eda4a246f635d1325e82f0d3555Affected
  • c66c17a0f69b0e017bbc01d999a28ed96ee84826 to before eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04beAffected
  • c66c17a0f69b0e017bbc01d999a28ed96ee84826 to before c0afb6b88fbbc177fa322a835f874be217bffe45Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.24 through 6.6.*Not affected
  • 6.7.12 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.