CVE-2024-35836

dpll: fix pin dump crash for rebound module

State
Published
Severity
Not scored
Published
May 17, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dpll: fix pin dump crash for rebound module

When a kernel module is unbound but the pin resources were not entirely freed (other kernel module instance of the same PCI device have had kept the reference to that pin), and kernel module is again bound, the pin properties would not be updated (the properties are only assigned when memory for the pin is allocated), prop pointer still points to the kernel module memory of the kernel module which was deallocated on the unbind.

If the pin dump is invoked in this state, the result is a kernel crash. Prevent the crash by storing persistent pin properties in dpll subsystem, copy the content from the kernel module when pin is allocated, instead of using memory of the kernel module.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9431063ad323ac864750aeba4d304389bc42ca4e to before 5050a5b9d8b4d3c6f7e376e07670e437db7ccf9cAffected
  • 9431063ad323ac864750aeba4d304389bc42ca4e to before 830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9bAffected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.7.3 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.