PT-2024-8213 · Linux+5 · Linux Kernel+5

Published 2024-01-22 · Updated 2025-03-28 · CVE-2024-35833

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a memory leak in the fsl-qdma component of the Linux kernel. This memory leak is caused by the dma alloc coherent() function not being undone in the remove function or in the error handling path of fsl qdma probe(). The vulnerability can be exploited to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2024-09755

CVE-2024-35833

DLA-3842-1

OESA-2024-2445

OESA-2024-2448

SUSE-SU-2024:2008-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2135-1

SUSE-SU-2024:2190-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20249-1

USN-6895-1

USN-6895-2

USN-6895-3

USN-6895-4

USN-6900-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3500

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35833.json · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2024-26817-amdkfd · Exploit
• https://ubuntu.com/security/CVE-2023-52642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52645 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49945 · Security Note
• https://ubuntu.com/security/CVE-2024-26803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6270 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-35833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26719 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26681 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6900-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26685 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26717 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26689 · Vendor Advisory