CVE-2024-35847
Published: May 17, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when its_vpe_init() fails after successfully allocating at least one interrupt. This happens because its_vpe_irq_domain_free() frees the interrupts along with the area bitmap and the vprop_page and its_vpe_irq_domain_alloc() subsequently frees the area bitmap and the vprop_page again. Fix this by unconditionally invoking its_vpe_irq_domain_free() which handles all cases correctly and by removing the bitmap/vprop_page freeing from its_vpe_irq_domain_alloc(). [ tglx: Massaged change log ]
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e - < f5417ff561b8ac9a7e53c747b8627a7ab58378aeaffected 7d75bbb4bc1ad90386776459d37e4ddfe605671e - < b72d2b1448b682844f995e660b77f2a1fabc1662affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e - < aa44d21574751a7d6bca892eb8e0e9ac68372e52affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e - < 5dbdbe1133911ca7d8466bb86885adec32ad9438affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e - < dd681710ab77c8beafe2e263064cb1bd0e2d6ca9+3 more versions |
Linux | Linux | affected 4.14unaffected 0 - < 4.14unaffected 4.19.313 - <= 4.19.*unaffected 5.4.275 - <= 5.4.*unaffected 5.10.216 - <= 5.10.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now