Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-35847 Details

Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when its_vpe_init() fails after successfully allocating at least one interrupt. This happens because its_vpe_irq_domain_free() frees the interrupts along with the area bitmap and the vprop_page and its_vpe_irq_domain_alloc() subsequently frees the area bitmap and the vprop_page again. Fix this by unconditionally invoking its_vpe_irq_domain_free() which handles all cases correctly and by removing the bitmap/vprop_page freeing from its_vpe_irq_domain_alloc(). [ tglx: Massaged change log ]

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/03170e657f62c26834172742492a8cb8077ef792	kernel.org	Patch
https://git.kernel.org/stable/c/5b012f77abde89bf0be8a0547636184fea618137	kernel.org	Patch
https://git.kernel.org/stable/c/5dbdbe1133911ca7d8466bb86885adec32ad9438	kernel.org	Patch
https://git.kernel.org/stable/c/aa44d21574751a7d6bca892eb8e0e9ac68372e52	kernel.org	Patch
https://git.kernel.org/stable/c/b72d2b1448b682844f995e660b77f2a1fabc1662	kernel.org	Patch
https://git.kernel.org/stable/c/c26591afd33adce296c022e3480dea4282b7ef91	kernel.org	Patch
https://git.kernel.org/stable/c/dd681710ab77c8beafe2e263064cb1bd0e2d6ca9	kernel.org	Patch
https://git.kernel.org/stable/c/f5417ff561b8ac9a7e53c747b8627a7ab58378ae	kernel.org	Patch
https://git.kernel.org/stable/c/03170e657f62c26834172742492a8cb8077ef792	CVE	Patch
https://git.kernel.org/stable/c/5b012f77abde89bf0be8a0547636184fea618137	CVE	Patch
https://git.kernel.org/stable/c/5dbdbe1133911ca7d8466bb86885adec32ad9438	CVE	Patch
https://git.kernel.org/stable/c/aa44d21574751a7d6bca892eb8e0e9ac68372e52	CVE	Patch
https://git.kernel.org/stable/c/b72d2b1448b682844f995e660b77f2a1fabc1662	CVE	Patch
https://git.kernel.org/stable/c/c26591afd33adce296c022e3480dea4282b7ef91	CVE	Patch
https://git.kernel.org/stable/c/dd681710ab77c8beafe2e263064cb1bd0e2d6ca9	CVE	Patch
https://git.kernel.org/stable/c/f5417ff561b8ac9a7e53c747b8627a7ab58378ae	CVE	Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	CVE	Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	CVE	Patch

see all 18 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-415	Double Free	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 4.14, < 4.19.313 >= 4.20, < 5.4.275 >= 5.5, < 5.10.216 >= 5.11, < 5.15.158 >= 5.16, < 6.1.90
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.9:rc1:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc2:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc3:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc4:::::: cpe:2.3:o:linux:linux_kernel:6.9:rc5:::::: Remediation No remediation found in references.
debian debian linux	10.0
CPE cpe:2.3:o:debian:debian_linux:10.0:::::::* Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	kernel.org
Dec 30, 2024	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Nov 5, 2024	CVE Modified	kernel.org
Jun 27, 2024	CVE Modified	kernel.org
Jun 25, 2024	CVE Modified	kernel.org
May 29, 2024	CVE Modified	kernel.org
May 17, 2024	New CVE Received	kernel.org