PT-2024-8477 · Linux+9 · Linux Kernel+9

Published

2024-04-24

·

Updated

2025-09-29

·

CVE-2024-35853

CVSS v3.1

6.4

Medium

VectorAV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37
Description A memory leak vulnerability has been identified in the Linux kernel, specifically in the mlxsw spectrum acl tcam component. This issue occurs during the rehash process, where filters are migrated from one region to another. If the migration fails, the code attempts to roll back to the previous region, but this rollback can also fail, leading to a memory leak. The vulnerability is caused by the assumption that the backup chunk does not exist if the currently used chunk does not reference the target region, which breaks when rolling back a rollback. This results in the backup chunk being overwritten and leaked.
Recommendations To resolve this issue, update the Linux kernel to version 6.6.37 or later. As a temporary workaround, consider disabling the mlxsw sp acl tcam vregion rehash work function until a patch is available. Restrict access to the vulnerable mlxsw module to minimize the risk of exploitation. Avoid using the vchunk->chunk and vchunk->chunk2 variables in the affected API endpoints until the issue is resolved.

Exploit

Fix

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:4211
ALSA-2024:4352
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
AZL-42114
BDU:2024-10037
CESA-2024_4211
CESA-2024_4352
CVE-2024-35853
DLA-3842-1
INFSA-2024_4211
INFSA-2024_4352
INFSA-2024_9315
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-1706
OESA-2024-1707
OPENSUSE-SU-2024_2947-1
RHSA-2024:4211
RHSA-2024:4352
RHSA-2024:9315
RHSA-2024_4211
RHSA-2024_4352
RHSA-2024_9315
RHSA-2025:4342
RLSA-2024:4211
RLSA-2024:4352
RXSA-2024:4211
SUSE-SU-2024:2802-1
SUSE-SU-2024:2894-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2947-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6896-1
USN-6896-2
USN-6896-3
USN-6896-4
USN-6896-5
USN-6898-1
USN-6898-2
USN-6898-3
USN-6898-4
USN-6917-1
USN-6919-1
USN-6927-1
USN-6949-1
USN-6949-2
USN-6952-1
USN-6952-2
USN-6955-1
USN-7019-1

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu