CVE-2024-35911: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35911 is a memory corruption vulnerability in the Linux kernel's ICE (Intel Ethernet Controller) driver that was discovered and disclosed in May 2024. The vulnerability affects systems using the Intel Ethernet Controller with the ICE driver, particularly during suspend and rebuild operations (NVD).

The vulnerability occurs when the ICE driver calls the ice_vsi_free_q_vectors() function during system suspend. Due to a change introduced in commit b3e7b3a6ee92, the driver zeroes out num_q_vectors but only restores it in ice_vsi_cfg_def(). This causes the ice_rebuild() function to allocate a zero-length buffer, after which num_q_vectors is updated. When the new value of num_q_vectors is used to index into the zero-length buffer, it results in memory corruption (Kernel Commit).

When exploited, this vulnerability causes the system to panic after suspend operations, leading to a denial of service condition. The issue manifests as a NULL pointer dereference and memory corruption, which can crash the system (Red Hat).

The vulnerability requires local access to a system with the affected ICE driver and the ability to trigger suspend operations. It has been confirmed to affect systems running kernel versions after 6.1.77, as testing showed the ICE driver works correctly for suspend/resume operations in that version (Kernel Commit).

The issue has been fixed in the Linux kernel through a patch that ensures all code referencing num_q_vectors only does so after it has been reset via ice_vsi_cfg_def(). Users should update their systems to the patched kernel version. The fix has been backported to various stable kernel branches (Kernel Commit).