---
cve: "CVE-2024-35831"
severity: "LOW"
cvss: 3.1
epss: "21%"
vendor: "Linux"
kev: false
exploited: false
published: "2024-05-17 14:15:19"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-08T14:26:50+02:00"
---

# CVE-2024-35831

> 3.1 LOW

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

io_uring: Fix release of pinned pages when __io_uaddr_map fails

Looking at the error path of __io_uaddr_map, if we fail after pinning
the pages for any reasons, ret will be set to -EINVAL and the error
handler won't properly release the pinned pages.

I didn't manage to trigger it without forcing a failure, but it can
happen in real life when memory is heavily fragmented.

## Patch verfügbar (OSV)

- Kernel ≥ 6.6.23
- Kernel ≥ 6.7.11
- Kernel ≥ 6.8.2

## Referenzen

- <https://git.kernel.org/stable/c/0b6f39c175ba5f0ef72bdb3b9d2a06ad78621d62>
- <https://git.kernel.org/stable/c/712e2c8415f55a4a4ddaa98a430b87f624109f69>
- <https://git.kernel.org/stable/c/4d376d7ad62b6a8e8dfff56b559d9d275e5b9b3a>
- <https://git.kernel.org/stable/c/67d1189d1095d471ed7fa426c7e384a7140a5dd7>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2024-35831) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_