SECUFOCUSNOW
Home›CVE index›CVE-2024-35986
Review reviewHigh

CVE-2024-35986

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The power_supply frame-work is not really designed for there to be long living in kernel references to power_supply devices. Specifically unregistering a power_supply while some other code has a reference to it triggers a WARN in power_supply_unregister(): WARN_ON(atomic_dec_return(&psy->use_cnt)); Folllowed by the power_supply still getting removed and the backing data freed anyway, leaving the tusb1210 charger-detect code with a dangling reference...

CVSS
7
EPSS
0.22%
12.7% percentile
CISA KEV
Not listed
Published
2024.05.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.22%
Technical severityCVSS 7

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The power_supply frame-work is not really designed for there to be long living in kernel references to power_supply devices. Specifically unregistering a power_supply while some other code has a reference to it triggers a WARN in power_supply_unregister(): WARN_ON(atomic_dec_return(&psy->use_cnt)); Folllowed by the power_supply still getting removed and the backing data freed anyway, leaving the tusb1210 charger-detect code with a dangling reference...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 48969a5623ed918713552e2b4f9d391c89b5e838 < 25b3498485ac281e5851700e33b97f12c9533fd8, >= 48969a5623ed918713552e2b4f9d391c89b5e838 < 73224a5d2180066c7fe05b4656647601ba08d588, >= 48969a5623ed918713552e2b4f9d391c89b5e838 < 9827caa5105fb16d1fae2e75c8d0e4662014b3ca, >= 48969a5623ed918713552e2b4f9d391c89b5e838 < bf6e4ee5c43690e4c5a8a057bbcd4ff986bed052, >= 5.18, >= 5.18 < 6.1.90, >= 6.2 < 6.6.30, >= 6.7 < 6.8.9, 6.9
Fixed versions
6.1.90, 6.6.30, 6.8.9

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416