---
id: CVE-2024-35830
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  media: tc358743: register v4l2 async device only after successful setup

  Ensure the device has been setup correctly before registering the v4l2
  async device, thus allow…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  media: tc358743: register v4l2 async device only after successful setup

  Ensure the device has been setup correctly before registering the v4l2
  async device, thus allow…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 4.3, < 4.19.311'
  - 'linux_kernel >= 4.20, < 5.4.273'
  - 'linux_kernel >= 5.5, < 5.10.214'
  - 'linux_kernel >= 5.11, < 5.15.153'
  - 'linux_kernel >= 5.16, < 6.1.83'
  - 'linux_kernel >= 6.2, < 6.6.23'
  - 'linux_kernel >= 6.7, < 6.7.11'
  - 'linux_kernel >= 6.8, < 6.8.2'
  - debian_linux = 10.0
patched:
  - linux_kernel 6.8.2
published: '2024-05-17'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:17:48.533'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-35830'
references:
  - url: 'https://git.kernel.org/stable/c/17c2650de14842c25c569cbb2126c421489a3a24'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4f1490a5d7a0472ee5d9f36547bc4ba46be755c7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/610f20e5cf35ca9c0992693cae0dd8643ce932e7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/87399f1ff92203d65f1febf5919429f4bb613a02'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8ba8db9786b55047df5ad3db3e01dd886687a77d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b8505a1aee8f1edc9d16d72ae09c93de086e2a1a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c915c46a25c3efb084c4f5e69a053d7f7a635496'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/daf21394f9898fb9f0698c3e50de08132d2164e6'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/edbb3226c985469a2f8eb69885055c9f5550f468'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/17c2650de14842c25c569cbb2126c421489a3a24'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/4f1490a5d7a0472ee5d9f36547bc4ba46be755c7'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/610f20e5cf35ca9c0992693cae0dd8643ce932e7'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/87399f1ff92203d65f1febf5919429f4bb613a02'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/8ba8db9786b55047df5ad3db3e01dd886687a77d'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/b8505a1aee8f1edc9d16d72ae09c93de086e2a1a'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/c915c46a25c3efb084c4f5e69a053d7f7a635496'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/daf21394f9898fb9f0698c3e50de08132d2164e6'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/edbb3226c985469a2f8eb69885055c9f5550f468'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-35830.json
  - url: 'https://access.redhat.com/security/cve/CVE-2024-35830'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2281176'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2024-35830'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-35830'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2024051742-CVE-2024-35830-4ad0@gregkh/T
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
  - score-dispute
epss: 0.00242
epssPercentile: 0.15293
ingestedAt: '2026-10-15T03:30:12.682Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-10T15:42:22.059592Z'
cwe:
  - CWE-908
scores:
  nvd: 7.8
  vendor: 5.5
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

media: tc358743: register v4l2 async device only after successful setup

Ensure the device has been setup correctly before registering the v4l2
async device, thus allowing userspace to access.

## Affected

- `linux_kernel >= 4.3, < 4.19.311`
- `linux_kernel >= 4.20, < 5.4.273`
- `linux_kernel >= 5.5, < 5.10.214`
- `linux_kernel >= 5.11, < 5.15.153`
- `linux_kernel >= 5.16, < 6.1.83`
- `linux_kernel >= 6.2, < 6.6.23`
- `linux_kernel >= 6.7, < 6.7.11`
- `linux_kernel >= 6.8, < 6.8.2`
- `debian_linux = 10.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.8.2`

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-35830.json)