Linux · Linux Kernel · CVE-2024-35911
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.1.77
**Description**
The vulnerability is related to a memory corruption bug in the ice driver, which can cause the kernel to panic after suspend. The issue arises from the driver calling the `ice vsi free q vectors()` function by itself when suspending, leading to a zero-length buffer allocation and subsequent memory corruption. The fix involves ensuring that all code referencing `num q vectors` does so after it has been reset via `ice vsi cfg def()`.
**Recommendations**
To resolve the issue, update the Linux kernel to a version later than 6.1.77, which includes the fix for the memory corruption bug. As a temporary workaround, consider disabling the `ice vsi rebuild set coalesce()` function until a patch is available. However, this may have performance implications and should be carefully evaluated before implementation.