CVE-2024-35809 – A race condition in the Linux kernel's PCI powe... (How to Fix)

Q: What is the severity of CVE-2024-35809?

CVE-2024-35809 has a CVSS score of 4.7 (MEDIUM). A race condition in the Linux kernel's PCI power management subsystem allows a kernel crash due to an unhandled page fault when removing certain PCI drivers. This affects Linux systems using PCI devices with runtime-idle callbacks, particularly the rtsx_pcr driver. The vulnerability requires local access to trigger.

📋 TL;DR

A race condition in the Linux kernel's PCI power management subsystem allows a kernel crash due to an unhandled page fault when removing certain PCI drivers. This affects Linux systems using PCI devices with runtime-idle callbacks, particularly the rtsx_pcr driver. The vulnerability requires local access to trigger.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific affected versions not explicitly stated in CVE, but patches exist for multiple stable branches

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Requires systems using PCI devices with .runtime_idle() callbacks, particularly rtsx_pcr driver for Realtek card readers.

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash and denial of service, potentially causing data loss or service disruption.

🟠

Likely Case

System crash or kernel panic when removing specific PCI devices, resulting in temporary denial of service.

🟢

If Mitigated

No impact if systems are patched or don't use affected PCI drivers with runtime-idle callbacks.

🌐 Internet-Facing: LOW - Requires local access to trigger, not remotely exploitable.

🏢 Internal Only: MEDIUM - Local users or processes could crash the system, but requires specific driver removal scenarios.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: NO

Unauthenticated Exploit: ✅ No

Complexity: HIGH - Requires specific timing conditions during driver removal

Exploitation requires local access and specific race condition timing during PCI driver removal operations.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Multiple stable kernel versions with commits 47d8aafcfe31, 6347348c6aba, 7cc94dd36e48, 900b81caf00c, 9a87375bb586

Vendor Advisory: https://git.kernel.org/stable/c/47d8aafcfe313511a98f165a54d0adceb34e54b1

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution's repositories. 2. Reboot system to load new kernel. 3. Verify kernel version matches patched release.

🔧 Temporary Workarounds

Disable runtime PM for affected drivers

linux

Prevent runtime power management for PCI devices using .runtime_idle() callbacks

echo 'on' > /sys/bus/pci/devices/[device]/power/control

Blacklist rtsx_pcr driver

linux

Prevent loading of the most commonly affected driver

echo 'blacklist rtsx_pcr' >> /etc/modprobe.d/blacklist.conf

🧯 If You Can't Patch

Restrict local user access to systems with affected PCI hardware
Avoid hot-removing PCI devices or driver unloading operations

🔍 How to Verify

Check if Vulnerable:

Check if system uses rtsx_pcr driver: lsmod | grep rtsx_pcr

Check Version:

uname -r

Verify Fix Applied:

Check kernel version includes fix commits or is newer than patched versions

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages
Page fault errors in dmesg
PCI driver removal failures

Network Indicators:

None - local vulnerability only

SIEM Query:

source="kernel" AND ("page fault" OR "kernel panic" OR "rtsx_pcr")

📊 Metadata

CVE ID: CVE-2024-35809

CVSS v3 Score: 4.7 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-362

Published: May 17, 2024

Last Updated: December 23, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-35809, you might also want to check these: