CVE-2024-35836

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-35836
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-35836.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-35836
Downstream
Related
Published
2024-05-17T14:02:27Z
Modified
2025-10-17T03:17:33.927527Z
Summary
dpll: fix pin dump crash for rebound module
Details

In the Linux kernel, the following vulnerability has been resolved:

dpll: fix pin dump crash for rebound module

When a kernel module is unbound but the pin resources were not entirely freed (other kernel module instance of the same PCI device have had kept the reference to that pin), and kernel module is again bound, the pin properties would not be updated (the properties are only assigned when memory for the pin is allocated), prop pointer still points to the kernel module memory of the kernel module which was deallocated on the unbind.

If the pin dump is invoked in this state, the result is a kernel crash. Prevent the crash by storing persistent pin properties in dpll subsystem, copy the content from the kernel module when pin is allocated, instead of using memory of the kernel module.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9431063ad323ac864750aeba4d304389bc42ca4e
Fixed
5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9431063ad323ac864750aeba4d304389bc42ca4e
Fixed
830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b

Affected versions

v6.*

v6.6
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.2

Database specific

vanir_signatures

[
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_is_freq_supported",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "239234622990683740035530811220585343142",
            "length": 287.0
        },
        "id": "CVE-2024-35836-005f2748"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_put",
            "file": "drivers/dpll/dpll_core.c"
        },
        "digest": {
            "function_hash": "124905523832464749539554282191339753168",
            "length": 272.0
        },
        "id": "CVE-2024-35836-09e68c75"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "file": "drivers/dpll/dpll_core.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "51870189321605199942653842173626101542",
                "139059835914213702299465728910414289412",
                "190707144678863358965627493594977259709",
                "297319415644721328201228369013456343331",
                "183298415364951496348380640728399618320",
                "222265768180744522173279487179857004118",
                "24458146006810992341517895258060552001",
                "307861071136818317491486089805116457086",
                "280133902344478761110094760767221838334",
                "281888698890133322227683602576061640242",
                "216414008321161912484374979165009331348",
                "322686118913498815676255813916112463750",
                "106663098791384429197186526489491543823",
                "193073922081098562781685668804960548108",
                "68812720233249329957379088825290497268",
                "240146084646146476960265517484112040885",
                "172236932222527157087472788226384862179",
                "320128221017046188001683199477491245126",
                "281644182114028288535484994863055726060"
            ]
        },
        "id": "CVE-2024-35836-0a9d4d85"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_msg_add_pin_freq",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "295908840047988400204156232700142220427",
            "length": 1092.0
        },
        "id": "CVE-2024-35836-20c9c076"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_alloc",
            "file": "drivers/dpll/dpll_core.c"
        },
        "digest": {
            "function_hash": "63198467188730950927081887040963607780",
            "length": 853.0
        },
        "id": "CVE-2024-35836-2aab788d"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_put",
            "file": "drivers/dpll/dpll_core.c"
        },
        "digest": {
            "function_hash": "124905523832464749539554282191339753168",
            "length": 272.0
        },
        "id": "CVE-2024-35836-32ccd0a9"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_msg_add_pin_freq",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "295908840047988400204156232700142220427",
            "length": 1092.0
        },
        "id": "CVE-2024-35836-36794285"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "file": "drivers/dpll/dpll_core.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "11326221520063009645281864740946902369",
                "30769556332514010255199565627855883105",
                "310439764940635081675138887976057517325",
                "203692947257985987287688750258609243811",
                "240245327691583049596146768771994671378",
                "257210039295582672724868247606447029608",
                "71916555182851096818043585888516430346"
            ]
        },
        "id": "CVE-2024-35836-39ea8329"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_prio_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "105411418265014180341514476671058729315",
            "length": 613.0
        },
        "id": "CVE-2024-35836-43d56314"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "file": "drivers/dpll/dpll_core.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "51870189321605199942653842173626101542",
                "139059835914213702299465728910414289412",
                "190707144678863358965627493594977259709",
                "297319415644721328201228369013456343331",
                "183298415364951496348380640728399618320",
                "222265768180744522173279487179857004118",
                "24458146006810992341517895258060552001",
                "307861071136818317491486089805116457086",
                "280133902344478761110094760767221838334",
                "281888698890133322227683602576061640242",
                "216414008321161912484374979165009331348",
                "322686118913498815676255813916112463750",
                "106663098791384429197186526489491543823",
                "193073922081098562781685668804960548108",
                "68812720233249329957379088825290497268",
                "240146084646146476960265517484112040885",
                "172236932222527157087472788226384862179",
                "320128221017046188001683199477491245126",
                "281644182114028288535484994863055726060"
            ]
        },
        "id": "CVE-2024-35836-4a1f1acd"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_on_pin_state_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "67998529394010074810238500923071119483",
            "length": 870.0
        },
        "id": "CVE-2024-35836-4d79ff4b"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_is_freq_supported",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "239234622990683740035530811220585343142",
            "length": 287.0
        },
        "id": "CVE-2024-35836-5ef8a21a"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "file": "drivers/dpll/dpll_core.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "11326221520063009645281864740946902369",
                "30769556332514010255199565627855883105",
                "310439764940635081675138887976057517325",
                "203692947257985987287688750258609243811",
                "240245327691583049596146768771994671378",
                "257210039295582672724868247606447029608",
                "71916555182851096818043585888516430346"
            ]
        },
        "id": "CVE-2024-35836-6c2be182"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_on_pin_register",
            "file": "drivers/dpll/dpll_core.c"
        },
        "digest": {
            "function_hash": "232693011821362798347361729592411215590",
            "length": 1081.0
        },
        "id": "CVE-2024-35836-6ed17338"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_alloc",
            "file": "drivers/dpll/dpll_core.c"
        },
        "digest": {
            "function_hash": "177332661090168430311809325292457528988",
            "length": 872.0
        },
        "id": "CVE-2024-35836-75297acb"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_phase_adj_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "54892923477993004617072419812682504706",
            "length": 1590.0
        },
        "id": "CVE-2024-35836-75e7a892"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "36750511983320653107406373709299766849",
                "38791550749383046063393473235382106088",
                "243340313030982030031598378325359656194",
                "276854612254488157761665841783507389500",
                "93473534908702717434623720505738648499",
                "2876384960927432214043296197635118165",
                "221660939183253906669358287569262508558",
                "283280826296481320257142407099396016501",
                "188391194899017910140408716409210269312",
                "311253602357643089675436522512958153120",
                "279387379025943541942726318161676012912",
                "49770844009131744882281588599199977161",
                "141167866502247987887812412415343967507",
                "246671909521055608615580935817153708955",
                "338717817043000265205457732020542705647",
                "244164171581834592627403581024503751251",
                "299863342128207585652933491909699944243",
                "24107976198507583242410317835625211349",
                "11055579675976056411834803396964368226",
                "181695564157869133697567664551943796341",
                "145696155831206670049767869920347692659",
                "179146823375046689982776320842564464845",
                "195713788006387851633169840932637731199",
                "77837616105992027907388325674122868281",
                "100985444286578691148806663014094587619",
                "157236662560192009231153842560012644681",
                "193482116593592705722141962793254652650",
                "194500111661613791508171620927789179229",
                "91829176366914411434827574362788937460",
                "157236662560192009231153842560012644681",
                "193482116593592705722141962793254652650",
                "194500111661613791508171620927789179229",
                "176846314268051614657003545411563204916",
                "239874919903257702295693954041944010487",
                "257886812764063526890816374700694506294",
                "289112425988084481105726447794664317450",
                "72065834046539490632786873634705001110",
                "199394676226011235574332956464856029778",
                "168051466554579941603651727472764644706",
                "178706405589303682013432932620523539355",
                "209553226441723319830528871103325459143",
                "121471293062138920221096878957935841540",
                "233270969433932763868746494694205171786",
                "15726395270649395134703876061468644774",
                "2765379881352117660789894338082806722",
                "77964535166851042613021286417746501563",
                "31863981267930458323445142625828691698",
                "319733155725876016951036252845387398160",
                "324767441343319627074094526431081392142"
            ]
        },
        "id": "CVE-2024-35836-7da3eb34"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_find",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "4434692244728091080776030150513118076",
            "length": 1042.0
        },
        "id": "CVE-2024-35836-7e23010e"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_phase_adj_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "54892923477993004617072419812682504706",
            "length": 1590.0
        },
        "id": "CVE-2024-35836-909a8cc4"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_find",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "4434692244728091080776030150513118076",
            "length": 1042.0
        },
        "id": "CVE-2024-35836-94fb76b8"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_prio_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "105411418265014180341514476671058729315",
            "length": 613.0
        },
        "id": "CVE-2024-35836-9b3b4c6b"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_cmd_pin_get_one",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "283742654812955166423821625683921096773",
            "length": 1594.0
        },
        "id": "CVE-2024-35836-a06a4058"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_state_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "216961981266600437550501384916568199648",
            "length": 629.0
        },
        "id": "CVE-2024-35836-a6ff9644"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_state_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "216961981266600437550501384916568199648",
            "length": 629.0
        },
        "id": "CVE-2024-35836-a7d31431"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_on_pin_state_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "67998529394010074810238500923071119483",
            "length": 870.0
        },
        "id": "CVE-2024-35836-b2bc687f"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_direction_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "80376011785509011226714007822120647620",
            "length": 629.0
        },
        "id": "CVE-2024-35836-bdbff35f"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_direction_set",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "80376011785509011226714007822120647620",
            "length": 629.0
        },
        "id": "CVE-2024-35836-c6320cf1"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@830ead5fb0c5855ce4d70ba2ed4a673b5f1e7d9b",
        "signature_version": "v1",
        "target": {
            "function": "dpll_pin_on_pin_register",
            "file": "drivers/dpll/dpll_core.c"
        },
        "digest": {
            "function_hash": "232693011821362798347361729592411215590",
            "length": 1081.0
        },
        "id": "CVE-2024-35836-dd9d1ae4"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "function": "dpll_cmd_pin_get_one",
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "function_hash": "47755914271655002353867395274002251763",
            "length": 1521.0
        },
        "id": "CVE-2024-35836-eef1ad45"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5050a5b9d8b4d3c6f7e376e07670e437db7ccf9c",
        "signature_version": "v1",
        "target": {
            "file": "drivers/dpll/dpll_netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "36750511983320653107406373709299766849",
                "38791550749383046063393473235382106088",
                "243340313030982030031598378325359656194",
                "276854612254488157761665841783507389500",
                "93473534908702717434623720505738648499",
                "2876384960927432214043296197635118165",
                "221660939183253906669358287569262508558",
                "283280826296481320257142407099396016501",
                "188391194899017910140408716409210269312",
                "311253602357643089675436522512958153120",
                "279387379025943541942726318161676012912",
                "49770844009131744882281588599199977161",
                "141167866502247987887812412415343967507",
                "246671909521055608615580935817153708955",
                "338717817043000265205457732020542705647",
                "244164171581834592627403581024503751251",
                "299863342128207585652933491909699944243",
                "24107976198507583242410317835625211349",
                "11055579675976056411834803396964368226",
                "181695564157869133697567664551943796341",
                "145696155831206670049767869920347692659",
                "179146823375046689982776320842564464845",
                "195713788006387851633169840932637731199",
                "77837616105992027907388325674122868281",
                "100985444286578691148806663014094587619",
                "157236662560192009231153842560012644681",
                "193482116593592705722141962793254652650",
                "194500111661613791508171620927789179229",
                "91829176366914411434827574362788937460",
                "157236662560192009231153842560012644681",
                "193482116593592705722141962793254652650",
                "194500111661613791508171620927789179229",
                "176846314268051614657003545411563204916",
                "239874919903257702295693954041944010487",
                "257886812764063526890816374700694506294",
                "289112425988084481105726447794664317450",
                "72065834046539490632786873634705001110",
                "199394676226011235574332956464856029778",
                "168051466554579941603651727472764644706",
                "178706405589303682013432932620523539355",
                "209553226441723319830528871103325459143",
                "121471293062138920221096878957935841540",
                "233270969433932763868746494694205171786",
                "15726395270649395134703876061468644774",
                "2765379881352117660789894338082806722",
                "77964535166851042613021286417746501563",
                "31863981267930458323445142625828691698",
                "319733155725876016951036252845387398160",
                "324767441343319627074094526431081392142"
            ]
        },
        "id": "CVE-2024-35836-f2dd4712"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.3