Answer in brief
CVE-2024-35847 records a High severity (CVSS 7.8) vulnerability in irqchip/gic-v3-its: Prevent double free on error. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <f5417ff561b8ac9a7e53c747b8627a7ab58378ae || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <b72d2b1448b682844f995e660b77f2a1fabc1662 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <aa44d21574751a7d6bca892eb8e0e9ac68372e52 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <5dbdbe1133911ca7d8466bb86885adec32ad9438 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <dd681710ab77c8beafe2e263064cb1bd0e2d6ca9 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <03170e657f62c26834172742492a8cb8077ef792 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <5b012f77abde89bf0be8a0547636184fea618137 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <c26591afd33adce296c022e3480dea4282b7ef91 | f5417ff561b8ac9a7e53c747b8627a7ab58378ae, b72d2b1448b682844f995e660b77f2a1fabc1662, aa44d21574751a7d6bca892eb8e0e9ac68372e52, 5dbdbe1133911ca7d8466bb86885adec32ad9438, dd681710ab77c8beafe2e263064cb1bd0e2d6ca9, 03170e657f62c26834172742492a8cb8077ef792, 5b012f77abde89bf0be8a0547636184fea618137, c26591afd33adce296c022e3480dea4282b7ef91 |
| Linux/Linuxgeneric | 4.14 | Not reported |
Published upstream
May 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when its_vpe_init() fails after successfully allocating at least one interrupt. This happens because its_vpe_irq_domain_free() frees the interrupts along with the area bitmap and the vprop_page and its_vpe_irq_domain_alloc() subsequently frees the area bitmap and the vprop_page again. Fix this by unconditionally invoking its_vpe_irq_domain_free() which handles all cases correctly and by removing the bitmap/vprop_page freeing from its_vpe_irq_domain_alloc(). [ tglx: Massaged change log ]
Quoted source text, attributed separately from HOL analysis.