CVE-2024-35837

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the use of an uninitialized resource in the mvpp2 component of the Linux kernel. This can lead to a denial of service when the kernel is booted using kexec, resulting in a kernel panic due to persistent register values. The problem is specifically tied to the mvpp2 bm pool cleanup() and mvpp2 bm init() functions in the drivers/net/ethernet/marvell/mvpp2/mvpp2 main.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.