🛡️ UBUNTU-CVE-2024-35879
⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

In the Linux kernel, the following vulnerability has been resolved: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals In the following sequence: 1) of_platform_depopulate() 2) of_overlay_remove() During the step 1, devices are destroyed and devlinks are removed. During the step 2, OF nodes are destroyed but __of_changeset_entry_destroy() can raise warnings related to missing of_node_put(): ERROR: memory leak, expected refcount 1 instead of 2 ... Indeed, during the devlink removals performed at step 1, the removal itself releasing the device (and the attached of_node) is done by a job queued in a workqueue and so, it is done asynchronously with respect to function calls. When the warning is present, of_node_put() will be called but wrongly too late from the workqueue job. In order to be sure that any ongoing devlink removals are done before the of_node destruction, synchronize the of_changeset_destroy() with the devlink removals.

Details

Severity Unknown
CVSS Score N/A
CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2024-05-19
Updated 2026-06-15
Modified 2026-06-03
Fix URL N/A

Affected Packages

Software From version Fixed in
linux 6.8.0-38.38
linux-allwinner-5.19
linux-aws 6.8.0-1011.12
linux-aws-5.0
linux-aws-5.11
linux-aws-5.13
linux-aws-5.15 5.15.0-1065.71~20.04.1
linux-aws-5.19
linux-aws-5.3
linux-aws-5.8
linux-aws-6.2
linux-aws-6.5
linux-aws-6.8 6.8.0-1011.12~22.04.1
linux-aws-fips 5.15.0-1065.71+fips1
linux-azure 6.8.0-1010.10
linux-azure-5.11
linux-azure-5.13
linux-azure-5.15 5.15.0-1068.77~20.04.1
linux-azure-5.19
linux-azure-5.3
linux-azure-5.8
linux-azure-6.2
linux-azure-6.5
linux-azure-6.8 6.8.0-1010.10~22.04.1
linux-azure-edge
linux-azure-fde 5.15.0-1068.77.1
linux-azure-fde-5.19
linux-azure-fde-6.2
linux-azure-fips 5.15.0-1068.77+fips1
linux-bluefield
linux-fips 5.15.0-115.125+fips1
linux-gcp 6.8.0-1010.11
linux-gcp-5.11
linux-gcp-5.13
linux-gcp-5.15 5.15.0-1065.73~20.04.1
linux-gcp-5.19
linux-gcp-5.3
linux-gcp-5.8
linux-gcp-6.2
linux-gcp-6.5
linux-gcp-fips 5.15.0-1064.72+fips1
linux-gke 6.8.0-1006.9
linux-gke-4.15
linux-gke-5.15
linux-gke-5.4
linux-gkeop 5.15.0-1048.55
linux-gkeop-5.15 5.15.0-1048.55~20.04.1
linux-gkeop-5.4
linux-hwe
linux-hwe-5.11
linux-hwe-5.13
linux-hwe-5.15 5.15.0-116.126~20.04.1
linux-hwe-5.19
linux-hwe-5.8
linux-hwe-6.2
linux-hwe-6.5
linux-hwe-edge
linux-ibm 6.8.0-1008.8
linux-ibm-5.15 5.15.0-1058.61~20.04.1
linux-intel 6.8.0-1007.14
linux-intel-5.13
linux-intel-iot-realtime 5.15.0-1058.60
linux-intel-iotg 5.15.0-1060.66
linux-intel-iotg-5.15 5.15.0-1060.66~20.04.1
linux-kvm 5.15.0-1062.67
linux-lowlatency 6.8.0-38.38.1
linux-lowlatency-hwe-5.15 5.15.0-116.126~20.04.1
linux-lowlatency-hwe-5.19
linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.5
linux-nvidia 6.8.0-1009.9
linux-nvidia-6.2
linux-nvidia-6.5
linux-nvidia-6.8 6.8.0-1009.9~22.04.1
linux-nvidia-tegra 5.15.0-1026.26
linux-nvidia-tegra-5.15 5.15.0-1027.27~20.04.1
linux-nvidia-tegra-igx 5.15.0-1015.15
linux-oem
linux-oem-5.10
linux-oem-5.13
linux-oem-5.14
linux-oem-5.17
linux-oem-5.6
linux-oem-6.0
linux-oem-6.1
linux-oem-6.5
linux-oem-6.8 6.8.0-1008.8
linux-oracle 6.8.0-1008.8
linux-oracle-5.0
linux-oracle-5.11
linux-oracle-5.13
linux-oracle-5.15 5.15.0-1063.69~20.04.1
linux-oracle-5.3
linux-oracle-5.8
linux-oracle-6.5
linux-oracle-6.8 6.8.0-1008.8~22.04.1
linux-raspi 6.8.0-1007.7
linux-raspi-realtime 6.8.0-2006.6
linux-raspi2
linux-realtime 6.8.1-1004.4
linux-riscv 6.8.0-38.38.1
linux-riscv-5.11
linux-riscv-5.15 5.15.0-1061.65~20.04.1
linux-riscv-5.19
linux-riscv-5.8
linux-riscv-6.5
linux-starfive-5.19
linux-starfive-6.2
linux-starfive-6.5
linux-xilinx-zynqmp 5.15.0-1035.39

References

Similar Threats

Patch Gap Protection

Running software with known vulnerabilities?

BotEraser can help reduce exposure by blocking IPs associated with exploit activity — even before a patch is available.

Start Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.