CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable()

Q: What is the severity of CVE-2024-36940?

CVE-2024-36940 is classified as a moderate severity vulnerability in the Linux kernel.

Q: How do I fix CVE-2024-36940?

To fix CVE-2024-36940, update to a kernel version that is equal to or higher than the remedied versions specified in the vulnerability report.

Q: What are the affected kernel versions for CVE-2024-36940?

CVE-2024-36940 affects several kernel versions, specifically those below 4.19.314, 5.4.276, 5.10.217, 5.15.159, 6.1.91, 6.6.31, and 6.8.10.

Q: Which Linux distributions are impacted by CVE-2024-36940?

CVE-2024-36940 impacts various distributions that utilize vulnerable kernel versions, particularly those based on the Red Hat and Debian kernels.

Q: Is CVE-2024-36940 being actively exploited?

There are currently no reports indicating active exploitation of CVE-2024-36940 in the wild.

Published May 30, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: core: delete incorrect free in pinctrlenable()

The "pctldev" struct is allocated in devmpinctrlregisterandinit(). It's a devm managed pointer that is freed by devmpinctrldevrelease(), so freeing it in pinctrlenable() will lead to a double free.

The devmpinctrldevrelease() function frees the pindescs and destroys the mutex as well.

Other sources

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: core: delete incorrect free in pinctrlenable()

The Linux kernel CVE team has assigned CVE-2024-36940 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024053043-CVE-2024-36940-0c83@gregkh/T

— Red Hat

Affected Software

224 affected componentsFixes available

IBM Security Verify Governance<=ISVG 10.0.2

IBM Security Verify Governance, Identity Manager Software Stack<=ISVG 10.0.2

IBM Security Verify Governance, Identity Manager Virtual Appliance<=ISVG 10.0.2

IBM Security Verify Governance Identity Manager Container<=ISVG 10.0.2

redhat/kernel<4.19.314

4.19.314

redhat/kernel<5.4.276

5.4.276

redhat/kernel<5.10.217

5.10.217

redhat/kernel<5.15.159

5.15.159

redhat/kernel<6.1.91

6.1.91

redhat/kernel<6.6.31

6.6.31

redhat/kernel<6.8.10

6.8.10

redhat/kernel<6.9

6.9

Linux Linux kernel>=4.11<4.19.314

Linux Linux kernel>=4.20<5.4.276

Linux Linux kernel>=5.5<5.10.217

Linux Linux kernel>=5.11<5.15.159

Linux Linux kernel>=5.16<6.1.91

Linux Linux kernel>=6.2<6.6.31

Linux Linux kernel>=6.7<6.8.10

Linux Linux kernel=6.9-rc1

Linux Linux kernel=6.9-rc2

Linux Linux kernel=6.9-rc3

Linux Linux kernel=6.9-rc4

Linux Linux kernel=6.9-rc5

Linux Linux kernel=6.9-rc6

Debian Debian Linux=10.0

linux/kernel>=4.11.0<4.19.314

4.19.314

linux/kernel>=4.20.0<5.4.276

5.4.276

linux/kernel>=5.5.0<5.10.217

5.10.217

linux/kernel>=5.11.0<5.15.159

5.15.159

linux/kernel>=5.16.0<6.1.91

6.1.91

linux/kernel>=6.2.0<6.6.31

6.6.31

linux/kernel>=6.7.0<6.8.10

6.8.10

debian/linux<6.1.94-1

6.1.94-1

debian/linux<6.8.11-1

6.8.11-1

debian/linux<6.8.11-1

6.8.11-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.3-1

ubuntu/linux-azure<4.15.0-1180.195~14.04.1

4.15.0-1180.195~14.04.1

ubuntu/linux-aws-hwe<4.15.0-1172.185~16.04.1

4.15.0-1172.185~16.04.1

ubuntu/linux-azure<4.15.0-1180.195~16.04.1

4.15.0-1180.195~16.04.1

ubuntu/linux-gcp<4.15.0-1165.182~16.04.1

4.15.0-1165.182~16.04.1

ubuntu/linux-hwe<4.15.0-228.240~16.04.1

4.15.0-228.240~16.04.1

ubuntu/linux-oracle<4.15.0-1134.145~16.04.1

4.15.0-1134.145~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux<4.15.0-228.240

4.15.0-228.240

ubuntu/linux-aws<4.15.0-1172.185

4.15.0-1172.185

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1130.140~18.04.1

5.4.0-1130.140~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1180.195

4.15.0-1180.195

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1135.142~18.04.1

5.4.0-1135.142~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1165.182

4.15.0-1165.182

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1134.143~18.04.1

5.4.0-1134.143~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-192.212~18.04.1

5.4.0-192.212~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1077.82~18.04.1

5.4.0-1077.82~18.04.1

ubuntu/linux-kvm<4.15.0-1155.160

4.15.0-1155.160

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1134.145

4.15.0-1134.145

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1129.138~18.04.1

5.4.0-1129.138~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1114.126~18.04.1

5.4.0-1114.126~18.04.1

ubuntu/linux-aws-fips<4.15.0-2110.116

4.15.0-2110.116

ubuntu/linux-azure-fips<4.15.0-2089.95

4.15.0-2089.95

ubuntu/linux-fips<4.15.0-1126.137

4.15.0-1126.137

ubuntu/linux-gcp-fips<4.15.0-2073.78

4.15.0-2073.78

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-192.212

5.4.0-192.212

ubuntu/linux-aws<5.4.0-1130.140

5.4.0-1130.140

ubuntu/linux-aws-5.15<5.15.0-1067.73~20.04.1

5.15.0-1067.73~20.04.1

ubuntu/linux-azure<5.4.0-1135.142

5.4.0-1135.142

ubuntu/linux-azure-5.15<5.15.0-1070.79~20.04.1

5.15.0-1070.79~20.04.1

ubuntu/linux-bluefield<5.4.0-1090.97

5.4.0-1090.97

ubuntu/linux-gcp<5.4.0-1134.143

5.4.0-1134.143

ubuntu/linux-gcp-5.15<5.15.0-1066.74~20.04.1

5.15.0-1066.74~20.04.1

ubuntu/linux-gkeop<5.4.0-1097.101

5.4.0-1097.101

ubuntu/linux-gkeop-5.15<5.15.0-1050.57~20.04.1

5.15.0-1050.57~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-118.128~20.04.1

5.15.0-118.128~20.04.1

ubuntu/linux-ibm<5.4.0-1077.82

5.4.0-1077.82

ubuntu/linux-ibm-5.15<5.15.0-1060.63~20.04.1

5.15.0-1060.63~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1062.68~20.04.1

5.15.0-1062.68~20.04.1

ubuntu/linux-iot<5.4.0-1042.43

5.4.0-1042.43

ubuntu/linux-kvm<5.4.0-1118.125

5.4.0-1118.125

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-118.128~20.04.1

5.15.0-118.128~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1027.27~20.04.1

5.15.0-1027.27~20.04.1

ubuntu/linux-oracle<5.4.0-1129.138

5.4.0-1129.138

ubuntu/linux-oracle-5.15<5.15.0-1065.71~20.04.1

5.15.0-1065.71~20.04.1

ubuntu/linux-raspi<5.4.0-1114.126

5.4.0-1114.126

ubuntu/linux-riscv-5.15<5.15.0-1063.67~20.04.1

5.15.0-1063.67~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1049.53

5.4.0-1049.53

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1130.140+fips1

5.4.0-1130.140+fips1

ubuntu/linux-azure-fips<5.4.0-1135.142+fips1

5.4.0-1135.142+fips1

ubuntu/linux-fips<5.4.0-1104.114

5.4.0-1104.114

ubuntu/linux-gcp-fips<5.4.0-1134.143+fips1

5.4.0-1134.143+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-118.128

5.15.0-118.128

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1067.73

5.15.0-1067.73

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1013.14~22.04.1

6.8.0-1013.14~22.04.1

ubuntu/linux-azure<5.15.0-1070.79

5.15.0-1070.79

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1012.14~22.04.1

6.8.0-1012.14~22.04.1

ubuntu/linux-azure-fde<5.15.0-1070.79.1

5.15.0-1070.79.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1066.74

5.15.0-1066.74

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1012.13~22.04.1

6.8.0-1012.13~22.04.1

ubuntu/linux-gke<5.15.0-1064.70

5.15.0-1064.70

ubuntu/linux-gkeop<5.15.0-1050.57

5.15.0-1050.57

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-40.40~22.04.3

6.8.0-40.40~22.04.3

ubuntu/linux-ibm<5.15.0-1060.63

5.15.0-1060.63

ubuntu/linux-ibm-6.8<6.8.0-1010.10~22.04.1

6.8.0-1010.10~22.04.1

ubuntu/linux-intel-iotg<5.15.0-1062.68

5.15.0-1062.68

ubuntu/linux-kvm<5.15.0-1064.69

5.15.0-1064.69

ubuntu/linux-lowlatency<5.15.0-118.128

5.15.0-118.128

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-40.40.1~22.04.1

6.8.0-40.40.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1062.63

5.15.0-1062.63

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1011.11~22.04.1

6.8.0-1011.11~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1027.27

5.15.0-1027.27

ubuntu/linux-nvidia-tegra-igx<5.15.0-1015.15

5.15.0-1015.15

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1065.71

5.15.0-1065.71

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1010.10~22.04.1

6.8.0-1010.10~22.04.1

ubuntu/linux-raspi<5.15.0-1060.63

5.15.0-1060.63

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-40.40.1~22.04.1

6.8.0-40.40.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1035.39

5.15.0-1035.39

ubuntu/linux-bluefield<5.15.0-1050.52

5.15.0-1050.52

ubuntu/linux-intel-iot-realtime<5.15.0-1060.62

5.15.0-1060.62

ubuntu/linux-realtime<5.15.0-1068.76

5.15.0-1068.76

ubuntu/linux-realtime-6.8<6.8.1-1006.6~22.04.1

6.8.1-1006.6~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1067.73+fips1

5.15.0-1067.73+fips1

ubuntu/linux-azure-fips<5.15.0-1070.79+fips1

5.15.0-1070.79+fips1

ubuntu/linux-fips<5.15.0-118.128+fips1

5.15.0-118.128+fips1

ubuntu/linux-gcp-fips<5.15.0-1066.74+fips1

5.15.0-1066.74+fips1

ubuntu/linux<6.8.0-40.40

6.8.0-40.40

ubuntu/linux-aws<6.8.0-1013.14

6.8.0-1013.14

ubuntu/linux-azure<6.8.0-1012.14

6.8.0-1012.14

ubuntu/linux-gcp<6.8.0-1012.13

6.8.0-1012.13

ubuntu/linux-gke<6.8.0-1008.11

6.8.0-1008.11

ubuntu/linux-ibm<6.8.0-1010.10

6.8.0-1010.10

ubuntu/linux-lowlatency<6.8.0-40.40.1

6.8.0-40.40.1

ubuntu/linux-nvidia<6.8.0-1011.11

6.8.0-1011.11

ubuntu/linux-nvidia-lowlatency<6.8.0-1011.11.1

6.8.0-1011.11.1

ubuntu/linux-oem-6.8<6.8.0-1010.10

6.8.0-1010.10

ubuntu/linux-oracle<6.8.0-1010.10

6.8.0-1010.10

ubuntu/linux-raspi<6.8.0-1009.10

6.8.0-1009.10

ubuntu/linux-riscv<6.8.0-40.40.1

6.8.0-40.40.1

ubuntu/linux-raspi-realtime<6.8.0-2008.8

6.8.0-2008.8

ubuntu/linux-realtime<6.8.1-1006.6

6.8.1-1006.6

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 4.19.314
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 5.4.276
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 5.10.217
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 5.15.159
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.1.91
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.6.31
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.8.10
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.9
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 4.19.314
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.4.276
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.10.217
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.159
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.91
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.6.31
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.8.10
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.94-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.8.11-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1180.195~14.04.1
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1172.185~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1180.195~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1165.182~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-228.240~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1134.145~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-228.240
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1172.185
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1130.140~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1180.195
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.142~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1165.182
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-192.212~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1077.82~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1155.160
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1134.145
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.138~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1114.126~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2110.116
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2089.95
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1126.137
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2073.78
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-192.212
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1130.140
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.142
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.79~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1090.97
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.74~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1097.101
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.57~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-118.128~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1077.82
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.63~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.68~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1042.43
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1118.125
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-118.128~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.27~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.138
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1114.126
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1063.67~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1049.53
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1130.140+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.142+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1104.114
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-118.128
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1013.14~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.79
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.14~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.79.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.74
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.13~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.70
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.57
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40~22.04.3
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.63
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.68
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.69
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-118.128
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.63
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.11~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.27
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.15
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.63
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.39
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.52
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.62
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.76
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1006.6~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.79+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-118.128+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.74+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1013.14
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.14
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.13
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.11
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.11
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.11.1
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1009.10
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2008.8
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1006.6
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Upgrade
Upgrade Linux kernel to a version that resolves this vulnerability.
Patch CVE-2024-36940

Event History

May 30, 2024

CVE Published

via MITRE·03:29 PM

Data Sourced

via MITRE·03:29 PM

DescriptionSeverity

Data Sourced

via OSV·03:29 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jun 3, 2024

Data Sourced

via Red Hat·11:55 AM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-36940?

CVE-2024-36940 is classified as a moderate severity vulnerability in the Linux kernel.

How do I fix CVE-2024-36940?

To fix CVE-2024-36940, update to a kernel version that is equal to or higher than the remedied versions specified in the vulnerability report.

What are the affected kernel versions for CVE-2024-36940?

CVE-2024-36940 affects several kernel versions, specifically those below 4.19.314, 5.4.276, 5.10.217, 5.15.159, 6.1.91, 6.6.31, and 6.8.10.

Which Linux distributions are impacted by CVE-2024-36940?

CVE-2024-36940 impacts various distributions that utilize vulnerable kernel versions, particularly those based on the Red Hat and Debian kernels.

Is CVE-2024-36940 being actively exploited?

There are currently no reports indicating active exploitation of CVE-2024-36940 in the wild.

CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable()

Other sources

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-36940?

How do I fix CVE-2024-36940?

What are the affected kernel versions for CVE-2024-36940?

Which Linux distributions are impacted by CVE-2024-36940?

Is CVE-2024-36940 being actively exploited?

Company

Resources

Contact