Answer in brief
CVE-2024-35847 records a Unknown severity vulnerability in irqchip/gic-v3-its: Prevent double free on error. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-35847 records a Unknown severity vulnerability in irqchip/gic-v3-its: Prevent double free on error. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <f5417ff561b8ac9a7e53c747b8627a7ab58378ae || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <b72d2b1448b682844f995e660b77f2a1fabc1662 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <aa44d21574751a7d6bca892eb8e0e9ac68372e52 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <5dbdbe1133911ca7d8466bb86885adec32ad9438 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <dd681710ab77c8beafe2e263064cb1bd0e2d6ca9 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <03170e657f62c26834172742492a8cb8077ef792 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <5b012f77abde89bf0be8a0547636184fea618137 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <c26591afd33adce296c022e3480dea4282b7ef91 | f5417ff561b8ac9a7e53c747b8627a7ab58378ae, b72d2b1448b682844f995e660b77f2a1fabc1662, aa44d21574751a7d6bca892eb8e0e9ac68372e52, 5dbdbe1133911ca7d8466bb86885adec32ad9438, dd681710ab77c8beafe2e263064cb1bd0e2d6ca9, 03170e657f62c26834172742492a8cb8077ef792, 5b012f77abde89bf0be8a0547636184fea618137, c26591afd33adce296c022e3480dea4282b7ef91 |
| Linux/Linuxgeneric | 4.14 | Not reported |
Published upstream
May 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when its_vpe_init() fails after successfully allocating at least one interrupt. This happens because its_vpe_irq_domain_free() frees the interrupts along with the area bitmap and the vprop_page and its_vpe_irq_domain_alloc() subsequently frees the area bitmap and the vprop_page again. Fix this by unconditionally invoking its_vpe_irq_domain_free() which handles all cases correctly and by removing the bitmap/vprop_page freeing from its_vpe_irq_domain_alloc(). [ tglx: Massaged change log ]
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <f5417ff561b8ac9a7e53c747b8627a7ab58378ae || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <b72d2b1448b682844f995e660b77f2a1fabc1662 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <aa44d21574751a7d6bca892eb8e0e9ac68372e52 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <5dbdbe1133911ca7d8466bb86885adec32ad9438 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <dd681710ab77c8beafe2e263064cb1bd0e2d6ca9 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <03170e657f62c26834172742492a8cb8077ef792 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <5b012f77abde89bf0be8a0547636184fea618137 || >=7d75bbb4bc1ad90386776459d37e4ddfe605671e <c26591afd33adce296c022e3480dea4282b7ef91 | f5417ff561b8ac9a7e53c747b8627a7ab58378ae, b72d2b1448b682844f995e660b77f2a1fabc1662, aa44d21574751a7d6bca892eb8e0e9ac68372e52, 5dbdbe1133911ca7d8466bb86885adec32ad9438, dd681710ab77c8beafe2e263064cb1bd0e2d6ca9, 03170e657f62c26834172742492a8cb8077ef792, 5b012f77abde89bf0be8a0547636184fea618137, c26591afd33adce296c022e3480dea4282b7ef91 |
| Linux/Linuxgeneric | 4.14 | Not reported |
Published upstream
May 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when its_vpe_init() fails after successfully allocating at least one interrupt. This happens because its_vpe_irq_domain_free() frees the interrupts along with the area bitmap and the vprop_page and its_vpe_irq_domain_alloc() subsequently frees the area bitmap and the vprop_page again. Fix this by unconditionally invoking its_vpe_irq_domain_free() which handles all cases correctly and by removing the bitmap/vprop_page freeing from its_vpe_irq_domain_alloc(). [ tglx: Massaged change log ]
Quoted source text, attributed separately from HOL analysis.