What is CVE-2024-35986?

CVE-2024-35986 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, classified as a Use After Free flaw (CWE-416), affecting Linux kernel versions from 5.18 onward and patched in 6.1.90, 6.6.30, 6.8.9 and others. CVE-2024-35986 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-35986?

CVE-2024-35986 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2024-35986?

Yes, CVE-2024-35986 has been patched. Fixed versions include 6.1.90, 6.6.30, 6.8.9 and others. If you are running Linux kernel 5.18 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-35986 actively exploited?

CVE-2024-35986 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Use After Free (CWE-416)?

The product references memory after it has been freed, which may cause it to crash, use unexpected values, or execute code. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/416.html

CVE-2024-35986

Medium

In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The power_supply frame-work is not really designed for there to be long living in kernel references to power_supply devices. Specifically unregistering a power_supply while some other code has a reference to it triggers a WARN in power_supply_unregister(): WARN_ON(atomic_dec_return(&psy->use_cnt)); Folllowed by the power_supply still getting removed and the backing data freed anyway, leaving the tusb1210 charger-detect code with a dangling reference, resulting in a crash the next time tusb1210_get_online() is called. Fix this by only holding the reference in tusb1210_get_online() freeing it at the end of the function. Note this still leaves a theoretical race window, but it avoids the issue when manually rmmod-ing the charger chip driver during development.

Package Linux Kernel

Published 2024-05-20

Last modified 2025-04-04

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-416

CVE-2024-35986 is a Use After Free vulnerability

What is Use After Free?

The product references memory after it has been freed, which may cause it to crash, use unexpected values, or execute code. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.18 and later are affected. Fixed in 6.1.90, 6.6.30, 6.8.9, 6.9 and their respective stable series.

Affected from

≥ 5.18

Fixed in

✓ 6.1.90 6.1.x ✓ 6.6.30 6.6.x ✓ 6.8.9 6.8.x ✓ 6.9

References

4 total

Kernel Git
https://git.kernel.org/stable/c/25b3498485ac281e5851700e33b97f12c9533fd8

Patch
Kernel Git
https://git.kernel.org/stable/c/73224a5d2180066c7fe05b4656647601ba08d588

Patch
Kernel Git
https://git.kernel.org/stable/c/9827caa5105fb16d1fae2e75c8d0e4662014b3ca

Patch
Kernel Git
https://git.kernel.org/stable/c/bf6e4ee5c43690e4c5a8a057bbcd4ff986bed052

Patch

Details

CVE ID CVE-2024-35986

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-05-20

Modified 2025-04-04

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-35986?

CVE-2024-35986 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as an Use After Free flaw (CWE-416) . It affects Linux kernel versions from 5.18 onward and has been patched in 6.1.90, 6.6.30, 6.8.9 and others. CVE-2024-35986 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-35986?

CVE-2024-35986 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2024-35986?

Yes. CVE-2024-35986 has been patched. Fixed versions include 6.1.90, 6.6.30, 6.8.9 and others. If you are running Linux kernel 5.18 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-35986 actively exploited?

No. CVE-2024-35986 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.