CVE-2024-35792: crypto: rk3288 - Fix use after free in unprepare
In the Linux kernel, the following vulnerability has been resolved:
crypto: rk3288 - Fix use after free in unprepare
The unprepare call must be carried out before the finalize call as the latter can free the request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch crypto: rk3288 - Fix use after free in unprepare
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35792?
CVE-2024-35792 has been classified with a critical severity due to the potential for exploitation in the Linux kernel.
How do I fix CVE-2024-35792?
To fix CVE-2024-35792, users must update their Linux kernel to a version that patches this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-35792?
CVE-2024-35792 affects Linux kernel versions between 6.6 and 6.8-rc6.
What type of vulnerability is CVE-2024-35792?
CVE-2024-35792 is a use after free vulnerability that could lead to serious memory corruption in the Linux kernel.
Is there a workaround for CVE-2024-35792?
There are no known workarounds for CVE-2024-35792 other than applying the necessary kernel updates.