PT-2024-3847 · Linux+9 · Linux Kernel+9

Published

2024-04-24

·

Updated

2025-09-29

·

CVE-2024-35855

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37
Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the mlxsw spectrum acl tcam module. This vulnerability occurs when the rule activity update delayed work accesses an entry that can be changed concurrently by the rehash delayed work, leading to a use-after-free condition. The fix involves closing the race and performing the activity query under the 'vregion->lock' mutex.
Recommendations To resolve this issue, update the Linux kernel to version 6.6.37 or later. As a temporary workaround, consider disabling the mlxsw sp acl tcam flower rule activity get function until a patch is available. Restrict access to the vulnerable module mlxsw spectrum acl tcam to minimize the risk of exploitation. Avoid using the ventry->entry parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Use After Free

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:4211
ALSA-2024:4352
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2024-04227
CESA-2024_4211
CESA-2024_4352
CVE-2024-35855
DLA-3842-1
INFSA-2024_4211
INFSA-2024_4352
INFSA-2024_9315
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-1694
OESA-2024-1706
OPENSUSE-SU-2024_2947-1
RHSA-2024:4211
RHSA-2024:4352
RHSA-2024:9315
RHSA-2024_4211
RHSA-2024_4352
RHSA-2024_9315
RHSA-2025:4509
RLSA-2024:4211
RLSA-2024:4352
RXSA-2024:4211
SUSE-SU-2024:2894-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2947-1
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3383-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-6896-1
USN-6896-2
USN-6896-3
USN-6896-4
USN-6896-5
USN-6898-1
USN-6898-2
USN-6898-3
USN-6898-4
USN-6917-1
USN-6919-1
USN-6927-1
USN-6949-1
USN-6949-2
USN-6952-1
USN-6952-2
USN-6955-1
USN-7019-1

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu