SUSE CVE-2024-35958

🗓️ 21 May 2024 01:58:51Reported by Suse CVEType

susecve🔗 www.suse.com👁 18 Views

Fix incorrect descriptor freeing in ena TX buffers after a virtual function reset to prevent crashes.

Reporter	Title	Published	Views	Family All 240
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management	10 Feb 202520:42	–	ibm
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2024:4211)	2 Jul 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel-rt (ALSA-2024:4352)	10 Jul 202400:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_1368)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2024_4211)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2024_4352)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crxsa-2024_4211)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_1410)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (crlsa-2024_4583)	1 Oct 202600:00	–	nessus
Tenable Nessus	Debian dla-3842 : linux-config-5.10 - security update	27 Jun 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
OpenSUSE Leap	15.5	noarch	cluster-md-kmp-64kb	5.14.21-150500.55.73.1	cluster-md-kmp-64kb-5.14.21-150500.55.73.1.noarch.rpm
OpenSUSE Leap	15.6	noarch	cluster-md-kmp-64kb	6.4.0-150600.23.7.3	cluster-md-kmp-64kb-6.4.0-150600.23.7.3.noarch.rpm
OpenSUSE Leap	15.5	noarch	cluster-md-kmp-azure	5.14.21-150500.33.60.1	cluster-md-kmp-azure-5.14.21-150500.33.60.1.noarch.rpm
OpenSUSE Leap	15.6	noarch	cluster-md-kmp-azure	6.4.0-150600.8.5.4	cluster-md-kmp-azure-6.4.0-150600.8.5.4.noarch.rpm
SUSE Linux Enterprise Server	12.5	noarch	cluster-md-kmp-default	4.12.14-122.222.1	cluster-md-kmp-default-4.12.14-122.222.1.noarch.rpm
OpenSUSE Leap	15.5	noarch	cluster-md-kmp-default	5.14.21-150500.55.73.1	cluster-md-kmp-default-5.14.21-150500.55.73.1.noarch.rpm
SUSE Linux Enterprise Server	15.5	noarch	cluster-md-kmp-default	5.14.21-150500.55.73.1	cluster-md-kmp-default-5.14.21-150500.55.73.1.noarch.rpm
OpenSUSE Leap	15.6	noarch	cluster-md-kmp-default	6.4.0-150600.23.7.3	cluster-md-kmp-default-6.4.0-150600.23.7.3.noarch.rpm
SUSE Linux Enterprise Server	15.6	noarch	cluster-md-kmp-default	6.4.0-150600.23.7.3	cluster-md-kmp-default-6.4.0-150600.23.7.3.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	16.0	noarch	cluster-md-kmp-default	6.12.0-160000.5.1	cluster-md-kmp-default-6.12.0-160000.5.1.noarch.rpm

Source	Link
suse	www.suse.com/security/cve/CVE-2024-35958
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/1224677
lists	www.lists.suse.com/pipermail/sle-updates/2024-June/035681.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2024-August/019244.html
lists	www.lists.suse.com/pipermail/sle-updates/2024-July/035874.html
lists	www.lists.suse.com/pipermail/sle-updates/2024-July/035868.html
lists	www.lists.suse.com/pipermail/sle-updates/2024-July/035895.html
lists	www.lists.suse.com/pipermail/sle-updates/2024-July/035907.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2024-July/019001.html

03 Oct 2026 01:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.5

EPSS0.00259

linux kernel ena descriptor free virtual function reset express data path redirect transmit queues crash prevention