← All advisories

Medium severity5.5NVD Advisory· Published May 17, 2024· Updated Jun 17, 2026

CVE-2024-35859

CVE-2024-35859

Description

In the Linux kernel, the following vulnerability has been resolved:

block: fix module reference leakage from bdev_open_by_dev error path

At the time bdev_may_open() is called, module reference is grabbed already, hence module reference should be released if bdev_may_open() failed.

This problem is found by code review.

Affected products

9

Linux/Kernelcpe-rescue8 versions
6.8+ 7 more
- (no CPE)range: 6.8
- (no CPE)
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.8,<6.8.9
- cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
osv-coords
pkg:linux/kernel
Range: >= 6.8.0, < 6.8.9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.