CVE-2024-35836

dpll: fix pin dump crash for rebound module

published May 17, 2024

CVSS
—
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dpll: fix pin dump crash for rebound module

When a kernel module is unbound but the pin resources were not entirely

freed (other kernel module instance of the same PCI device have had kept

the reference to that pin), and kernel module is again bound, the pin

properties would not be updated (the properties are only assigned when

memory for the pin is allocated), prop pointer still points to the

kernel module memory of the kernel module which was deallocated on the

unbind.

If the pin dump is invoked in this state, the result is a kernel crash.

Prevent the crash by storing persistent pin properties in dpll subsystem,

copy the content from the kernel module when pin is allocated, instead of

using memory of the kernel module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Published
2024-05-17T14:02Z
EPSS history
Timeline
  • 17 MAY 14:02Z
    dpll: fix pin dump crash for rebound module
    cvelistv5