CVE-2024-35904

Published: May 19, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid dereference of garbage after mount failure In case kern_mount() fails and returns an error pointer return in the error branch instead of continuing and dereferencing the error pointer. While on it drop the never read static variable selinuxfs_mount.

Affected (4)

Products: Linux: Linux Kernel

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.17 to 6.6.26
Linux Linux Kernel	From 6.7 to 6.8.5
Linux Linux Kernel	Version 6.9 rc1
Linux Linux Kernel	Version 6.9 rc2

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (8)

https://git.kernel.org/stable/c/37801a36b4d68892ce807264f784d818f8d0d39b

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/477ed6789eb9f3f4d3568bb977f90c863c12724e

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/68784a5d01b8868ff85a7926676b6729715fff3c

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

http://www.openwall.com/lists/oss-security/2024/05/30/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2024/05/30/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://git.kernel.org/stable/c/37801a36b4d68892ce807264f784d818f8d0d39b

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/477ed6789eb9f3f4d3568bb977f90c863c12724e

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/68784a5d01b8868ff85a7926676b6729715fff3c

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.