CVE-2024-36002

In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpll_pin_on_pin_register() for multiple parent pins In scenario where pin is registered with multiple parent pins via dpll_pin_on_pin_register(..), all belonging to the same dpll device. A second call to dpll_pin_on_pin_unregister(..) would cause a call trace, as it tries to use already released registration resources (due to fix introduced in b446631f355e). In this scenario pin was registered twice, so resources are not yet expected to be release until each registered pin/pin pair is unregistered. Currently, the following crash/call trace is produced when ice driver is removed on the system with installed E810T NIC which includes dpll device: WARNING: CPU: 51 PID: 9155 at drivers/dpll/dpll_core.c:809 dpll_pin_ops+0x20/0x30 RIP: 0010:dpll_pin_ops+0x20/0x30 Call Trace: ? __warn+0x7f/0x130 ? dpll_pin_ops+0x20/0x30 dpll_msg_add_pin_freq+0x37/0x1d0 dpll_cmd_pin_get_one+0x1c0/0x400 ? __nlmsg_put+0x63/0x80 dpll_pin_event_send+0x93/0x140 dpll_pin_on_pin_unregister+0x3f/0x100 ice_dpll_deinit_pins+0xa1/0x230 [ice] ice_remove+0xf1/0x210 [ice] Fix by adding a parent pointer as a cookie when creating a registration, also when searching for it. For the regular pins pass NULL, this allows to create separated registration for each parent the pin is registered with.

• https://git.kernel.org/stable/c/38d7b94e81d068b8d8c8392f421cfd2c3bbfd1a6Patch
• https://git.kernel.org/stable/c/f3e1cf62d18220a3aa97e084e7a3552debece9fcPatch
• https://git.kernel.org/stable/c/38d7b94e81d068b8d8c8392f421cfd2c3bbfd1a6Patch
• https://git.kernel.org/stable/c/f3e1cf62d18220a3aa97e084e7a3552debece9fcPatch

Published

May 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35997In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35998In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35999In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2024-3600The Poll Maker – Best WordPress Poll Plugin plugin for WordP…6.1
• CVE-2024-36000In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36001In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-36003In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36004In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36005In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36006In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36007In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36008In the Linux kernel, the following vulnerability has been re…5.5