CVE-2024-35826

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

block: Fix page refcounts for unaligned buffers in __bio_release_pages()

Fix an incorrect number of pages being released for buffers that do not start at the beginning of a page.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 9025ee1079291fac79c7fcc20086e9f0015f86f4, < 242006996d15f5ca62e22f8c7de077d9c4a8f367; >= 8955324cc9f93304efe163120038b38c36c09fba, < 7d3765550374f71248c55e6206ea1d6fd4537e65; >= d198c15d181cc9d580f0f2c25150b077d1d49c1a, < ecbd9ced84dd655a8f4cd49d2aad0e80dbf6bf35; >= 1b151e2435fc3a9b10c8946c6aebe9f3e1938c55, < c9d3d2fbde9b8197bce88abcbe8ee8e713ffe7c2; >= 1b151e2435fc3a9b10c8946c6aebe9f3e1938c55, < 38b43539d64b2fa020b3b9a752a986769f87f7a6; d2d0b95ca1b5fefa3deed444a803c9f809db66cf; 3f4e660144edb053886fc80f587a71ad7afc2ad6; bfc0647791d7a8f3e178a896a26c4ef7794876b7; 0f2dca516541032fe47a1236c852f58edc662795; >= 6.1.75, < 6.1.84; >= 6.6.14, < 6.6.24; >= 6.7.2, < 6.7.12; >= 4.19.307, < 4.20; >= 5.4.269, < 5.5; >= 5.10.210, < 5.11; >= 5.15.148, < 5.16
LinuxLinux6.8

References

Timeline

Published
May 17, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-358275.5In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() The "contrCVE-2024-358285.5In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() In the CVE-2024-358295.5In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix a memleak in lima_heap_alloc When lima_vm_map_bo fails, CVE-2024-35836.4The Simple Like Page Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions CVE-2024-358305.5In the Linux kernel, the following vulnerability has been resolved: media: tc358743: register v4l2 async device only after successful setupCVE-2024-358315.5In the Linux kernel, the following vulnerability has been resolved: io_uring: Fix release of pinned pages when __io_uaddr_map fails LookinCVE-2024-358325.5In the Linux kernel, the following vulnerability has been resolved: bcachefs: kvfree bch_fs::snapshots in bch2_fs_snapshots_exit bch_fs::sCVE-2024-358335.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMACVE-2024-358345.5In the Linux kernel, the following vulnerability has been resolved: xsk: recycle buffer in case Rx queue was full Add missing xsk_buff_freCVE-2024-358357.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocatedCVE-2024-358365.5In the Linux kernel, the following vulnerability has been resolved: dpll: fix pin dump crash for rebound module When a kernel module is unCVE-2024-358375.5In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: clear BM pool before initialization Register value persist
CVE-2024-35826: Medium severity, CVSS 5.5 | Vulnix