{"id":"CVE-2024-35830","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: tc358743: register v4l2 async device only after successful setup\n\nEnsure the device has been setup correctly before registering the v4l2\nasync device, thus allow…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: tc358743: register v4l2 async device only after successful setup\n\nEnsure the device has been setup correctly before registering the v4l2\nasync device, thus allow…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.3, < 4.19.311","linux_kernel >= 4.20, < 5.4.273","linux_kernel >= 5.5, < 5.10.214","linux_kernel >= 5.11, < 5.15.153","linux_kernel >= 5.16, < 6.1.83","linux_kernel >= 6.2, < 6.6.23","linux_kernel >= 6.7, < 6.7.11","linux_kernel >= 6.8, < 6.8.2","debian_linux = 10.0"],"patched":["linux_kernel 6.8.2"],"published":"2024-05-17","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:17:48.533","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-35830","references":[{"url":"https://git.kernel.org/stable/c/17c2650de14842c25c569cbb2126c421489a3a24","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4f1490a5d7a0472ee5d9f36547bc4ba46be755c7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/610f20e5cf35ca9c0992693cae0dd8643ce932e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/87399f1ff92203d65f1febf5919429f4bb613a02","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8ba8db9786b55047df5ad3db3e01dd886687a77d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b8505a1aee8f1edc9d16d72ae09c93de086e2a1a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c915c46a25c3efb084c4f5e69a053d7f7a635496","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/daf21394f9898fb9f0698c3e50de08132d2164e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/edbb3226c985469a2f8eb69885055c9f5550f468","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/17c2650de14842c25c569cbb2126c421489a3a24","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/4f1490a5d7a0472ee5d9f36547bc4ba46be755c7","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/610f20e5cf35ca9c0992693cae0dd8643ce932e7","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/87399f1ff92203d65f1febf5919429f4bb613a02","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/8ba8db9786b55047df5ad3db3e01dd886687a77d","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/b8505a1aee8f1edc9d16d72ae09c93de086e2a1a","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/c915c46a25c3efb084c4f5e69a053d7f7a635496","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/daf21394f9898fb9f0698c3e50de08132d2164e6","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/edbb3226c985469a2f8eb69885055c9f5550f468","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-35830.json"},{"url":"https://access.redhat.com/security/cve/CVE-2024-35830"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2281176"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-35830"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35830"},{"url":"https://lore.kernel.org/linux-cve-announce/2024051742-CVE-2024-35830-4ad0@gregkh/T"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"epss":0.00242,"epssPercentile":0.15293,"ingestedAt":"2026-10-15T03:30:12.682Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-10T15:42:22.059592Z"},"cwe":["CWE-908"],"scores":{"nvd":7.8,"vendor":5.5},"slug":"CVE-2024-35830","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: tc358743: register v4l2 async device only after successful setup\n\nEnsure the device has been setup correctly before registering the v4l2\nasync device, thus allowing userspace to access.\n\n## Affected\n\n- `linux_kernel >= 4.3, < 4.19.311`\n- `linux_kernel >= 4.20, < 5.4.273`\n- `linux_kernel >= 5.5, < 5.10.214`\n- `linux_kernel >= 5.11, < 5.15.153`\n- `linux_kernel >= 5.16, < 6.1.83`\n- `linux_kernel >= 6.2, < 6.6.23`\n- `linux_kernel >= 6.7, < 6.7.11`\n- `linux_kernel >= 6.8, < 6.8.2`\n- `debian_linux = 10.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.8.2`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-10-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-35830.json)","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}