Answer in brief
CVE-2024-35835 records a Unknown severity vulnerability in net/mlx5e: fix a double-free in arfs_create_groups. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-35835 records a Unknown severity vulnerability in net/mlx5e: fix a double-free in arfs_create_groups. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <e3d3ed8c152971dbe64c92c9ecb98fdb52abb629 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <2501afe6c4c9829d03abe9a368b83d9ea1b611b7 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <cf116d9c3c2aebd653c2dfab5b10c278e9ec3ee5 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <c57ca114eb00e03274dd38108d07a3750fa3c056 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <42876db001bbea7558e8676d1019f08f9390addb || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <b21db3f1ab7967a81d6bbd328d28fe5a4c07a8a7 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <66cc521a739ccd5da057a1cb3d6346c6d0e7619b || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <3c6d5189246f590e4e1f167991558bdb72a4738b | e3d3ed8c152971dbe64c92c9ecb98fdb52abb629, 2501afe6c4c9829d03abe9a368b83d9ea1b611b7, cf116d9c3c2aebd653c2dfab5b10c278e9ec3ee5, c57ca114eb00e03274dd38108d07a3750fa3c056, 42876db001bbea7558e8676d1019f08f9390addb, b21db3f1ab7967a81d6bbd328d28fe5a4c07a8a7, 66cc521a739ccd5da057a1cb3d6346c6d0e7619b, 3c6d5189246f590e4e1f167991558bdb72a4738b |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
May 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails, arfs_create_groups will free ft->g and return an error. However, arfs_create_table, the only caller of arfs_create_groups, will hold this error and call to mlx5e_destroy_flow_table, in which the ft->g will be freed again.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <e3d3ed8c152971dbe64c92c9ecb98fdb52abb629 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <2501afe6c4c9829d03abe9a368b83d9ea1b611b7 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <cf116d9c3c2aebd653c2dfab5b10c278e9ec3ee5 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <c57ca114eb00e03274dd38108d07a3750fa3c056 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <42876db001bbea7558e8676d1019f08f9390addb || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <b21db3f1ab7967a81d6bbd328d28fe5a4c07a8a7 || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <66cc521a739ccd5da057a1cb3d6346c6d0e7619b || >=1cabe6b0965ec067ac60e8f182f16d479a3b9a5c <3c6d5189246f590e4e1f167991558bdb72a4738b | e3d3ed8c152971dbe64c92c9ecb98fdb52abb629, 2501afe6c4c9829d03abe9a368b83d9ea1b611b7, cf116d9c3c2aebd653c2dfab5b10c278e9ec3ee5, c57ca114eb00e03274dd38108d07a3750fa3c056, 42876db001bbea7558e8676d1019f08f9390addb, b21db3f1ab7967a81d6bbd328d28fe5a4c07a8a7, 66cc521a739ccd5da057a1cb3d6346c6d0e7619b, 3c6d5189246f590e4e1f167991558bdb72a4738b |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
May 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails, arfs_create_groups will free ft->g and return an error. However, arfs_create_table, the only caller of arfs_create_groups, will hold this error and call to mlx5e_destroy_flow_table, in which the ft->g will be freed again.
Quoted source text, attributed separately from HOL analysis.