CVE-2024-35837: net: mvpp2: clear BM pool before initialization
In the Linux kernel, the following vulnerability has been resolved:
net: mvpp2: clear BM pool before initialization
Register value persist after booting the kernel using kexec which results in kernel panic. Thus clear the BM pool registers before initialisation to fix the issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35837?
CVE-2024-35837 is considered a high severity vulnerability due to its potential to cause kernel panic.
How do I fix CVE-2024-35837?
To fix CVE-2024-35837, update your Linux kernel to one of the patched versions, such as 5.10.223-1 or 6.12.12-1.
What software is affected by CVE-2024-35837?
CVE-2024-35837 affects specific versions of the Linux kernel found in Debian, including version 5.10.223-1 and 6.12.12-1.
What causes CVE-2024-35837?
CVE-2024-35837 is caused by the persistence of register values after booting using kexec, resulting in kernel panic.
Is there a workaround for CVE-2024-35837?
There is no official workaround for CVE-2024-35837; applying the software update is the only recommended solution.