CVE-2024-35816
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
17/05/2024
Last modified:
26/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
firewire: ohci: prevent leak of left-over IRQ on unbind<br />
<br />
Commit 5a95f1ded28691e6 ("firewire: ohci: use devres for requested IRQ")<br />
also removed the call to free_irq() in pci_remove(), leading to a<br />
leftover irq of devm_request_irq() at pci_disable_msi() in pci_remove()<br />
when unbinding the driver from the device<br />
<br />
remove_proc_entry: removing non-empty directory &#39;irq/136&#39;, leaking at<br />
least &#39;firewire_ohci&#39;<br />
Call Trace:<br />
? remove_proc_entry+0x19c/0x1c0<br />
? __warn+0x81/0x130<br />
? remove_proc_entry+0x19c/0x1c0<br />
? report_bug+0x171/0x1a0<br />
? console_unlock+0x78/0x120<br />
? handle_bug+0x3c/0x80<br />
? exc_invalid_op+0x17/0x70<br />
? asm_exc_invalid_op+0x1a/0x20<br />
? remove_proc_entry+0x19c/0x1c0<br />
unregister_irq_proc+0xf4/0x120<br />
free_desc+0x3d/0xe0<br />
? kfree+0x29f/0x2f0<br />
irq_free_descs+0x47/0x70<br />
msi_domain_free_locked.part.0+0x19d/0x1d0<br />
msi_domain_free_irqs_all_locked+0x81/0xc0<br />
pci_free_msi_irqs+0x12/0x40<br />
pci_disable_msi+0x4c/0x60<br />
pci_remove+0x9d/0xc0 [firewire_ohci<br />
01b483699bebf9cb07a3d69df0aa2bee71db1b26]<br />
pci_device_remove+0x37/0xa0<br />
device_release_driver_internal+0x19f/0x200<br />
unbind_store+0xa1/0xb0<br />
<br />
remove irq with devm_free_irq() before pci_disable_msi()<br />
also remove it in fail_msi: of pci_probe() as this would lead to<br />
an identical leak
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.5 (including) | 6.6.24 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.7.12 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc7:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/318f6d53dd425c400e35f1a9b7af682c2c6a66d6
- https://git.kernel.org/stable/c/43c70cbc2502cf2557105c662eeed6a15d082b88
- https://git.kernel.org/stable/c/575801663c7dc38f826212b39e3b91a4a8661c33
- https://git.kernel.org/stable/c/318f6d53dd425c400e35f1a9b7af682c2c6a66d6
- https://git.kernel.org/stable/c/43c70cbc2502cf2557105c662eeed6a15d082b88
- https://git.kernel.org/stable/c/575801663c7dc38f826212b39e3b91a4a8661c33



