{"id":"CVE-2024-35904","title":"selinux: avoid dereference of garbage after mount failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: avoid dereference of garbage after mount failure\n\nIn case kern_mount() fails and returns an error pointer return in the\nerror branch instead of continuing and …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 0619f0f5e36f12e100ef294f5980cfe7c93ff23e < 563e631a18c5b2bbab674a58154bcf41a6d90f13","Linux >= 0619f0f5e36f12e100ef294f5980cfe7c93ff23e < 477ed6789eb9f3f4d3568bb977f90c863c12724e","Linux >= 0619f0f5e36f12e100ef294f5980cfe7c93ff23e < 68784a5d01b8868ff85a7926676b6729715fff3c","Linux >= 0619f0f5e36f12e100ef294f5980cfe7c93ff23e < 37801a36b4d68892ce807264f784d818f8d0d39b","Linux 4.17"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-05-20T14:08:38.593035Z"},"published":"2024-05-19","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:18:19.710Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-35904","references":[{"url":"https://git.kernel.org/stable/c/563e631a18c5b2bbab674a58154bcf41a6d90f13"},{"url":"https://git.kernel.org/stable/c/477ed6789eb9f3f4d3568bb977f90c863c12724e"},{"url":"https://git.kernel.org/stable/c/68784a5d01b8868ff85a7926676b6729715fff3c"},{"url":"https://git.kernel.org/stable/c/37801a36b4d68892ce807264f784d818f8d0d39b"}],"tags":["cve.org"],"epss":0.00229,"epssPercentile":0.13707,"ingestedAt":"2026-11-03T12:44:28.810Z","slug":"CVE-2024-35904","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nselinux: avoid dereference of garbage after mount failure\n\nIn case kern_mount() fails and returns an error pointer return in the\nerror branch instead of continuing and dereferencing the error pointer.\n\nWhile on it drop the never read static variable selinuxfs_mount.\n\n## Affected\n\n- `Linux >= 0619f0f5e36f12e100ef294f5980cfe7c93ff23e < 563e631a18c5b2bbab674a58154bcf41a6d90f13`\n- `Linux >= 0619f0f5e36f12e100ef294f5980cfe7c93ff23e < 477ed6789eb9f3f4d3568bb977f90c863c12724e`\n- `Linux >= 0619f0f5e36f12e100ef294f5980cfe7c93ff23e < 68784a5d01b8868ff85a7926676b6729715fff3c`\n- `Linux >= 0619f0f5e36f12e100ef294f5980cfe7c93ff23e < 37801a36b4d68892ce807264f784d818f8d0d39b`\n- `Linux 4.17`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}