PT-2024-26815 · Linux+5 · Linux Kernel+5

Published 2024-04-04 · Updated 2025-03-28 · CVE-2024-35975

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a resource leak in the octeontx2-pf driver. Upon class creation, the Netdev driver allocates transmit schedulers to support shaping and scheduling. However, a bug in the previous patch that added support for Round Robin scheduling causes the driver to not free transmit schedulers after class deletion. This patch fixes the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-03073

CVE-2024-35975

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20249-1

USN-6893-1

USN-6893-2

USN-6893-3

USN-6918-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2982

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35975.json · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2024-26817-amdkfd · Exploit
• https://ubuntu.com/security/CVE-2024-26999 · Vendor Advisory
• https://git.kernel.org/stable/c/b34fe77a1b18654233e4e54b334fcaeddf487100 · Patch
• https://ubuntu.com/security/CVE-2024-35860 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36023 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27013 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35877 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35959 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27008 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35894 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6893-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35924 · Vendor Advisory