First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-35926

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix async_disable descriptor leak

The disable_async paths of iaa_compress/decompress() don't free idxd descriptors in the async_disable case. Currently this only happens in the testcases where req->dst is set to null. Add a test to free them in those paths.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= ea7a5cbb43696cfacf73e61916d1860ac30b5b2f, < d994f7d77aaded05dc05af58a2720fd4f4b72a83; >= ea7a5cbb43696cfacf73e61916d1860ac30b5b2f, < 262534ddc88dfea7474ed18adfecf856e4fbe054
Linux	Linux	6.8

References

Timeline

Published: May 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-359275.5In the Linux kernel, the following vulnerability has been resolved: drm: Check output polling initialized before disabling In drm_kms_help CVE-2024-359297.8In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock() For the ker CVE-2024-35935.4The UberMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to mi CVE-2024-359305.5In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to CVE-2024-359315.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip do PCI error slot reset during RAS recovery Why: CVE-2024-359327.8In the Linux kernel, the following vulnerability has been resolved: drm/vc4: don't check if plane->state->fb == state->fb Currently, when CVE-2024-359335.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintel_read_version If hci_CVE-2024-359345.5In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() Many s CVE-2024-359353.3In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() C CVE-2024-359365.5In the Linux kernel, the following vulnerability has been resolved: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() T CVE-2024-359377.1In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like th CVE-2024-359385.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: decrease MHI channel buffer length to 8KB Currently buf_

CVE-2024-35926: Medium severity, CVSS 5.5 | Vulnix