PT-2024-3853

CVE-2024-35785

·

Published

2024-03-04

·

Updated

2024-11-05

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to incorrect error handling in the optee module of the Linux kernel, specifically when registering devices on the TEE bus. This can lead to a kernel panic. The error path has a bug that causes the kernel to panic when it fails to register devices. The commit that introduced this bug is mentioned as 7269cba53d90 ("tee: optee: Fix supplicant based device enumeration").
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
DLA-3842-1
OESA-2024-2292
OESA-2024-2293
USN-6898-1
USN-6898-2
USN-6898-3
USN-6898-4
USN-6917-1
USN-6919-1
USN-6927-1
USN-7019-1
Found an issue in the description? Have something to add? Feel free to write us 👾