First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-35792

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: rk3288 - Fix use after free in unprepare

The unprepare call must be carried out before the finalize call as the latter can free the request.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= c66c17a0f69b0e017bbc01d999a28ed96ee84826, < 48dd260fdb728eda4a246f635d1325e82f0d3555; >= c66c17a0f69b0e017bbc01d999a28ed96ee84826, < eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be; >= c66c17a0f69b0e017bbc01d999a28ed96ee84826, < c0afb6b88fbbc177fa322a835f874be217bffe45
Linux	Linux	6.6

References

Timeline

Published: May 17, 2024
Last modified: Aug 4, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-357935.5In the Linux kernel, the following vulnerability has been resolved: debugfs: fix wait/cancellation handling during remove Ben Greear furth CVE-2024-357945.5In the Linux kernel, the following vulnerability has been resolved: dm-raid: really frozen sync_thread during suspend 1) commit f52f5c71f3 CVE-2024-357955.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix deadlock while reading mqd from debugfs An errant disk CVE-2024-357965.5In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The fu CVE-2024-357975.5In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix two shmem bugs When cachestat on shmem races with s CVE-2024-357984.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race in read_extent_buffer_pages() There are reports from t CVE-2024-357995.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent crash when disable stream [Why] Disabling str CVE-2024-35806.1The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some of its settings, which could allow high privilege users suc CVE-2024-358005.5In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if get_next_variable() is actuall CVE-2024-358015.5In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD Commit 672365477ae8 CVE-2024-358035.5In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Call mixed mode boot services on the firmware's stack Nor CVE-2024-358045.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Mark target gfn of emulated atomic instruction as dirty When

CVE-2024-35792: High severity, CVSS 7.8 | Vulnix