CVE-2024-35785
kernel: tee: optee: Fix kernel panic caused by incorrect error handling
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 17, 2024
Updated · August 19, 2026
Description
A flaw was found in the Linux kernel's Trusted Execution Environment (TEE) subsystem, specifically within the Open Portable Trusted Execution Environment (OP-TEE) component. Incorrect error handling in this component can lead to a kernel panic, resulting in a denial of service. A local attacker could potentially exploit this vulnerability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-390 · Detection of Error Condition Without Action