Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2024-35997HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up

Description

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up The flag I2C_HID_READ_PENDING is used to serialize I2C operations. However, this is not necessary, because I2C core already has its own locking for that. More importantly, this flag can cause a lock-up: if the flag is set in i2c_hid_xfer() and an interrupt happens, the interrupt handler (i2c_hid_irq) will check this flag and return immediately without doing anything, then the interrupt handler will be invoked again in an infinite loop. Since interrupt handler is an RT task, it takes over the CPU and the flag-clearing task never gets scheduled, thus we have a lock-up. Delete this unnecessary flag.

Timeline

  1. ID reserved

    By Linux

  2. · 3 days later

    Published

  3. · 2 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2024-35997, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.18% · top 93% of all CVEs (14 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Affected products

  • Linux · Linux

    • affected 4a200c3b9a40242652b5734630bdd0bcf3aca75f – < 21bfca822cfc1e71796124e93b46e0d9fa584401
    • affected 4a200c3b9a40242652b5734630bdd0bcf3aca75f – < c448a9fd50f77e8fb9156ff64848aa4295eb3003
    • affected 4a200c3b9a40242652b5734630bdd0bcf3aca75f – < 5095b93021b899f54c9355bebf36d78854c33a22
    • affected 4a200c3b9a40242652b5734630bdd0bcf3aca75f – < b65fb50e04a95eec34a9d1bc138454a98a5578d8
    • affected 4a200c3b9a40242652b5734630bdd0bcf3aca75f – < 0561b65fbd53d3e788c5b0222d9112ca016fd6a1
    • affected 4a200c3b9a40242652b5734630bdd0bcf3aca75f – < 29e94f295bad5be59cf4271a93e22cdcf5536722
    • affected 4a200c3b9a40242652b5734630bdd0bcf3aca75f – < 418c5575d56410c6e186ab727bf32ae32447d497
    • affected 4a200c3b9a40242652b5734630bdd0bcf3aca75f – < 9c0f59e47a90c54d0153f8ddc0f80d7a36207d0e

  • Linux · Linux

    • affected 3.8
    • unaffected < 3.8
    • unaffected 4.19.313 – ≤ 4.19.*
    • unaffected 5.4.275 – ≤ 5.4.*
    • unaffected 5.10.216 – ≤ 5.10.*
    • unaffected 5.15.158 – ≤ 5.15.*
    • unaffected 6.1.90 – ≤ 6.1.*
    • unaffected 6.6.30 – ≤ 6.6.*
    • unaffected 6.8.9 – ≤ 6.8.*
    • unaffected 6.9 – ≤ *

References

References11

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-35997 badge
[![CVE-2024-35997](https://cveledger.app/badge/CVE-2024-35997.svg)](https://cveledger.app/cve/CVE-2024-35997)

Record last updated .