01 Record

CVE-2024-35835

net/mlx5e: fix a double-free in arfs_create_groups

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net/mlx5e: fix a double-free in arfs_create_groups

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.62% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 47.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-17 14:02Z2 YR AGO

Last updated

2026-08-05 11:30Z1 MO AGO

Reserved

2024-05-17

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-415Double FreeVariant

Data version

5.2

Document digest

525a982244be728ac2fa0aaa99df2347f59c46cec396c75903fd695f46887f71

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1cabe6b0965ec067ac60e8f182f16d479a3b9a5c to < e3d3ed8c152971dbe64c92c9ecb98fdb52abb629, 1cabe6b0965ec067ac60e8f182f16d479a3b9a5c to < 2501afe6c4c9829d03abe9a368b83d9ea1b611b7, 1cabe6b0965ec067ac60e8f182f16d479a3b9a5c to < cf116d9c3c2aebd653c2dfab5b10c278e9ec3ee5, 1cabe6b0965ec067ac60e8f182f16d479a3b9a5c to < c57ca114eb00e03274dd38108d07a3750fa3c056, 1cabe6b0965ec067ac60e8f182f16d479a3b9a5c to < 42876db001bbea7558e8676d1019f08f9390addb, 1cabe6b0965ec067ac60e8f182f16d479a3b9a5c to < b21db3f1ab7967a81d6bbd328d28fe5a4c07a8a7, 1cabe6b0965ec067ac60e8f182f16d479a3b9a5c to < 66cc521a739ccd5da057a1cb3d6346c6d0e7619b, 1cabe6b0965ec067ac60e8f182f16d479a3b9a5c to < 3c6d5189246f590e4e1f167991558bdb72a4738b, 4.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e3d3ed8c152971dbe64c92c9ecb98fdb52abb629
git.kernel.orghttps://git.kernel.org/stable/c/2501afe6c4c9829d03abe9a368b83d9ea1b611b7
git.kernel.orghttps://git.kernel.org/stable/c/cf116d9c3c2aebd653c2dfab5b10c278e9ec3ee5
git.kernel.orghttps://git.kernel.org/stable/c/c57ca114eb00e03274dd38108d07a3750fa3c056
git.kernel.orghttps://git.kernel.org/stable/c/42876db001bbea7558e8676d1019f08f9390addb
git.kernel.orghttps://git.kernel.org/stable/c/b21db3f1ab7967a81d6bbd328d28fe5a4c07a8a7
git.kernel.orghttps://git.kernel.org/stable/c/66cc521a739ccd5da057a1cb3d6346c6d0e7619b
git.kernel.orghttps://git.kernel.org/stable/c/3c6d5189246f590e4e1f167991558bdb72a4738b
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

01 Record index

CVE-2024-35835

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-35835

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References