CVE-2024-35792CWE-416

CVE-2024-35792

High · published May 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: rk3288 - Fix use after free in unprepare

The unprepare call must be carried out before the finalize call

as the latter can free the request.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Weakness
CWE-416 · Use After Free
Published
2024-05-17T17:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6, < 6.6.246.6.24
linux/linux_kernel≥ 6.7, < 6.7.126.7.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 MAY 12:24Z
    crypto: rk3288 - Fix use after free in unprepare
    cvelistv5