CVE-2024-35852: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35852 affects the Linux kernel's mlxsw spectrum_acl_tcam component, specifically related to a memory leak vulnerability discovered in May 2024. The issue occurs in the rehash work cancellation process of the ACL TCAM module (NVD).

The vulnerability stems from a logic flaw in the rehash delayed work scheduling mechanism. After a previous fix for use-after-free during rehash, the non-negative credit count no longer accurately indicates migration completion. This can result in pending work being associated with allocated hints, leading to memory leaks when the work is canceled during ACL region dismantling (Kernel Patch). The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability results in memory leaks in the Linux kernel when canceling rehash work in the mlxsw spectrum_acl_tcam component. This can lead to resource exhaustion and potential system instability (NVD).

The vulnerability requires local access and low complexity to exploit, with low privileges required and no user interaction needed. It affects Linux kernel versions from 5.1 through 6.1.90 (NVD).

The issue has been fixed by modifying the hint handling during work cancellation. The fix ensures that hints are properly freed if they are associated with a work that was canceled while pending. The patch has been integrated into multiple kernel versions (Kernel Patch).