Lucene search

K
cvelistLinuxCVELIST:CVE-2024-35837
HistoryMay 17, 2024 - 2:02 p.m.

CVE-2024-35837 net: mvpp2: clear BM pool before initialization

2024-05-1714:02:32
Linux
www.cve.org
linux kernel
vulnerability
resolution
net
mvpp2
bm pool
initialization
register value
kexec
kernel panic

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved:

net: mvpp2: clear BM pool before initialization

Register value persist after booting the kernel using
kexec which results in kernel panic. Thus clear the
BM pool registers before initialisation to fix the issue.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c"
    ],
    "versions": [
      {
        "version": "3f518509dedc",
        "lessThan": "83f99138bf3b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f518509dedc",
        "lessThan": "af47faa6d332",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f518509dedc",
        "lessThan": "cec65f09c47d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f518509dedc",
        "lessThan": "938729484cfa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f518509dedc",
        "lessThan": "dc77f6ab5c37",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f518509dedc",
        "lessThan": "9f538b415db8",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c"
    ],
    "versions": [
      {
        "version": "3.17",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.17",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.210",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.149",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.76",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.15",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.3",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%