Riskcovery

CVE-2024-35904

selinux: avoid dereference of garbage after mount failure

State
Published
Severity
Not scored
Published
May 19, 2024
Updated
Oct 30, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

selinux: avoid dereference of garbage after mount failure

In case kern_mount() fails and returns an error pointer return in the error branch instead of continuing and dereferencing the error pointer.

While on it drop the never read static variable selinuxfs_mount.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0619f0f5e36f12e100ef294f5980cfe7c93ff23e to before 563e631a18c5b2bbab674a58154bcf41a6d90f13Affected
  • 0619f0f5e36f12e100ef294f5980cfe7c93ff23e to before 477ed6789eb9f3f4d3568bb977f90c863c12724eAffected
  • 0619f0f5e36f12e100ef294f5980cfe7c93ff23e to before 68784a5d01b8868ff85a7926676b6729715fff3cAffected
  • 0619f0f5e36f12e100ef294f5980cfe7c93ff23e to before 37801a36b4d68892ce807264f784d818f8d0d39bAffected
LinuxLinux
  • 4.17Affected
  • before 4.17Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.