PT-2024-26800 · Linux+5 · Linux Kernel+5

Published

2024-04-04

·

Updated

2026-03-14

·

CVE-2024-35951

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the error path in the panfrost mmu map fault addr() function. If page or sgt allocation fails, the code should not release the pages ref obtained earlier to avoid unbalanced get/put pages() calls. Instead, it should leave everything in place and let the BO release function handle extra cleanup when the object is destroyed, or let the fault handler try again next time it's called.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-67755
BDU:2026-03508
CVE-2024-35951
ECHO-659F-2382-671F
OESA-2024-1737
OESA-2024-1738
SUSE-SU-2024:2008-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2135-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20249-1
USN-6893-1
USN-6893-2
USN-6893-3
USN-6918-1
USN-7159-1
USN-7159-2
USN-7159-3
USN-7159-4
USN-7159-5
USN-7166-1
USN-7166-2
USN-7166-3
USN-7166-4
USN-7186-1
USN-7186-2
USN-7194-1
USN-7195-1
USN-7195-2

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu