PT-2024-8401 · Linux+2 · Linux Kernel+2

Published 2024-03-06 · Updated 2025-09-26 · CVE-2024-35816

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a leak of left-over IRQ on unbind in the firewire ohci driver. This leak occurs when the driver is unbound from the device, leading to a leftover IRQ of devm request irq() at pci disable msi() in pci remove(). The vulnerability allows an attacker to potentially access confidential information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Memory Leak

Weakness Enumeration

CWE-200

CWE-401

Related Identifiers

BDU:2024-09960

CVE-2024-35816

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35816.json · Exploit
• https://git.kernel.org/stable/c/318f6d53dd425c400e35f1a9b7af682c2c6a66d6 · Patch
• https://osv.dev/vulnerability/CVE-2024-35816 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-35816 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-35816 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35816 · Security Note
• https://git.kernel.org/stable/c/43c70cbc2502cf2557105c662eeed6a15d082b88 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35816 · Vendor Advisory
• https://git.kernel.org/stable/c/575801663c7dc38f826212b39e3b91a4a8661c33 · Patch
• https://bdu.fstec.ru/vul/2024-09960 · Security Note
• https://ubuntu.com/security/CVE-2024-35816 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-35816 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-35816 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.24 · Note