{
  "cveId": "CVE-2024-35785",
  "url": "https://patchblox.com/security/cve/CVE-2024-35785",
  "summary": "CVE-2024-35785 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-35785, released May 17, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tee: optee: Fix kernel panic caused by incorrect...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  tee: optee: Fix kernel panic caused by incorrect error handling  The error path while failing to register devices on the TEE bus has a bug leading to kernel panic as follows:  [   15.398930] Unable to handle kernel paging request at virtual address ffff07ed00626d7c [   15.406913] Mem abort info: [   15.409722]   ESR = 0x0000000096000005 [   15.413490]   EC = 0x25: DABT (current EL), IL = 32 bits [   15.418814]   SET = 0, FnV = 0 [   15.421878]   EA = 0, S1PTW = 0 [   15.425031]   FSC = 0x05: level 1 translation fault [   15.429922] Data abort info: [   15.432813]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [   15.438310]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [   15.443372]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [   15.448697] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000d9e3e000 [   15.455413] [ffff07ed00626d7c] pgd=1800000bffdf9003, p4d=1800000bffdf9003, pud=0000000000000000 [   15.464146] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP  Commit 7269cba53d90 (\u0022tee: optee: Fix supplicant based device enumeration\u0022) lead to the introduction of this bug. So fix it appropriately.",
  "published": "2024-05-17T13:15:58Z",
  "severity": "high",
  "cvss": 7.1,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
  "epss": 0.00232,
  "epssPercentile": 0.14179,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.85-1",
      "fix": "DEBIAN-CVE-2024-35785",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-35785",
      "released": "2024-05-17T13:15:58Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.7.12-1",
      "fix": "DEBIAN-CVE-2024-35785",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-35785",
      "released": "2024-05-17T13:15:58Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.7.12-1",
      "fix": "DEBIAN-CVE-2024-35785",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-35785",
      "released": "2024-05-17T13:15:58Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}