CVE-2024-35855: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35855 is a use-after-free vulnerability in the Linux kernel's mlxsw spectrum_acl_tcam component. The vulnerability was discovered on May 17, 2024, affecting Linux kernel versions from 5.1 through 6.9-rc5. The issue occurs in the rule activity update delayed work functionality that periodically traverses configured rules and queries their activity from the device (NVD).

The vulnerability stems from a race condition where the entry pointed by 'ventry->entry' can be changed concurrently by the rehash delayed work while the rule activity update is accessing it. This leads to a use-after-free condition in the mlxsw_sp_acl_tcam_flower_rule_activity_get function. The CVSS v3.1 base score is 7.8 (High) with vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability could potentially lead to privilege escalation, information disclosure, or system crashes due to the use-after-free condition in the kernel's network stack (NVD).

The vulnerability requires local access and low privileges to exploit. No known exploits in the wild have been reported at the time of assessment (NVD).

The issue has been fixed by closing the race condition and performing the activity query under the 'vregion->lock' mutex. The fix has been backported to multiple stable kernel versions. Users should update to patched kernel versions (Kernel Patch).