In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path while failing to register devices on the TEE bus has a bug leading to kernel panic as follows: [ 15.398930] Unable to handle kernel paging request at virtual address ffff07ed00626d7c [ 15.406913] Mem abort info: [ 15.409722] ESR = 0x0000000096000005 [ 15.413490] EC = 0x25: DABT (current EL), IL = 32 bits [ 15.418814] SET = 0, FnV = 0 [ 15.421878] EA = 0, S1PTW = 0 [ 15.425031] FSC = 0x05: level 1 translation fault [ 15.429922] Data abort info: [ 15.432813] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 15.438310] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 15.443372] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 15.448697] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000d9e3e000 [ 15.455413] [ffff07ed00626d7c] pgd=1800000bffdf9003, p4d=1800000bffdf9003, pud=0000000000000000 [ 15.464146] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP Commit 7269cba53d90 ("tee: optee: Fix supplicant based device enumeration") lead to the introduction of this bug. So fix it appropriately.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00053.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/4b12ff5edd141926d49c9ace4791adf3a4902fe7 cve-icon cve-icon
https://git.kernel.org/stable/c/520f79c110ff712b391b3d87fcacf03c74bc56ee cve-icon cve-icon
https://git.kernel.org/stable/c/95915ba4b987cf2b222b0f251280228a1ff977ac cve-icon cve-icon
https://git.kernel.org/stable/c/bc40ded92af55760d12bec8222d4108de725dbe4 cve-icon cve-icon
https://git.kernel.org/stable/c/bfa344afbe472a9be08f78551fa2190c1a07d7d3 cve-icon cve-icon
https://git.kernel.org/stable/c/e5b5948c769aa1ebf962dddfb972f87d8f166f95 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024051706-CVE-2024-35785-b813@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-35785 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-35785 cve-icon
History

Mon, 05 May 2025 09:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T09:05:20.743Z

Reserved: 2024-05-17T12:19:12.338Z

Link: CVE-2024-35785

cve-icon Vulnrichment

Updated: 2024-08-02T03:21:47.405Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-17T13:15:58.403

Modified: 2024-11-21T09:20:53.437

Link: CVE-2024-35785

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-17T00:00:00Z

Links: CVE-2024-35785 - Bugzilla