CVE-2024-35837

A vulnerability was found in the Linux kernel's Marvell PPv2 (mvpp2) network driver, where the Buffer Management(BM) pool is not properly cleared before initialization. This oversight could lead to unintended behavior or security risks, such as the use of uninitialized data in network operations.

Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

CVE-2024-35837 addresses a vulnerability in the Linux kernel's mvpp2 (Marvell PPv2) network driver, where the BM (Buffer Management) pool was not being properly cleared before initialization. This oversight could lead to unintended behavior or security risks, such as the use of uninitialized data in network operations. The fix ensures that the BM pool is cleared during the initialization process, enhancing the stability and security of the network driver.