PT-2024-8418 · Linux+7 · Linux Kernel+7
Robert Elliott
·
Published
2024-03-25
·
Updated
2025-09-29
·
CVE-2024-35911
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.77
Description
The vulnerability is related to a memory corruption bug in the ice driver, which can cause the kernel to panic after suspend. The issue arises from the driver calling the
ice vsi free q vectors() function by itself when suspending, leading to a zero-length buffer allocation and subsequent memory corruption. The fix involves ensuring that all code referencing num q vectors does so after it has been reset via ice vsi cfg def().Recommendations
To resolve the issue, update the Linux kernel to a version later than 6.1.77, which includes the fix for the memory corruption bug. As a temporary workaround, consider disabling the
ice vsi rebuild set coalesce() function until a patch is available. However, this may have performance implications and should be carefully evaluated before implementation.Exploit
Fix
Memory Corruption
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu