QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-35848

Back to search

CVE-2024-35848

Published: May 17, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered, the read will fail, and the device will be torn down. If another driver accesses the nvmem device after the teardown, it will reference invalid memory. Move the failure point before registering the nvmem device.

VendorProductVersions

Linux

Linux

affected
b20eb4c1f0261eebe6e1b9221c0d6e4048837778 - < c850f71fca09ea41800ed55905980063d17e01da
affected
b20eb4c1f0261eebe6e1b9221c0d6e4048837778 - < 26d32bec4c6d255a03762f33c637bfa3718be15a
affected
b20eb4c1f0261eebe6e1b9221c0d6e4048837778 - < c43e5028f5a35331eb25017f5ff6cc21735005c6
affected
b20eb4c1f0261eebe6e1b9221c0d6e4048837778 - < 2af84c46b9b8f2d6c0f88d09ee5c849ae1734676
affected
b20eb4c1f0261eebe6e1b9221c0d6e4048837778 - < 6d8b56ec0c8f30d5657382f47344a32569f7a9bc

+1 more versions

Linux

Linux

affected
5.3
unaffected
0 - < 5.3
unaffected
5.10.217 - <= 5.10.*
unaffected
5.15.159 - <= 5.15.*
unaffected
6.1.91 - <= 6.1.*

+3 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now