CVE-2024-35831

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to insufficient input validation in the io uring component of the Linux kernel. Specifically, the function io uaddr map() in io uring/io uring.c does not properly handle errors, leading to a potential denial of service. When memory is heavily fragmented, the error handler may not properly release pinned pages, causing issues. The vulnerability can be triggered in real-life scenarios, but it requires specific conditions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.