PT-2024-8416 · Linux+5 · Linux Kernel+5

Nicolas Dufresne · Published 2024-03-26 · Updated 2025-02-03 · CVE-2024-35921

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vulnerability is related to the stateless HEVC decoder in the Linux kernel, which saves the instance pointer in the context regardless of whether the initialization worked or not. This causes a use-after-free issue when the pointer is freed in case of a failure in the deinit function. The issue is solved by only storing the instance pointer when the initialization is successful.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Improper Initialization

Weakness Enumeration

CWE-416

CWE-665

Related Identifiers

BDU:2024-09975

CVE-2024-35921

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6893-1

USN-6893-2

USN-6893-3

USN-6918-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2143

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35921.json · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2024-26817-amdkfd · Exploit
• https://ubuntu.com/security/CVE-2024-26999 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-35921 · Security Note
• https://ubuntu.com/security/CVE-2024-35860 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36023 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27013 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35877 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35959 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27008 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35894 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6893-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35924 · Vendor Advisory