High 7.8Published May 17, 2024

CVE-2024-35830media: tc358743: register v4l2 async device only after successful setup

Updated under an hour ago (Oct 26, 2026, 4:40 PM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: tc358743: register v4l2 async device only after successful setup Ensure the device has been setup correctly before registering the v4l2 async device, thus allowing userspace to access.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4c5211a100399c3823563193dd881dcb3b7d24fc before 17c2650de14842c25c569cbb2126c421489a3a24; from 4c5211a100399c3823563193dd881dcb3b7d24fc before daf21394f9898fb9f0698c3e50de08132d2164e6; from 4c5211a100399c3823563193dd881dcb3b7d24fc before 610f20e5cf35ca9c0992693cae0dd8643ce932e7; from 4c5211a100399c3823563193dd881dcb3b7d24fc before b8505a1aee8f1edc9d16d72ae09c93de086e2a1a; from 4c5211a100399c3823563193dd881dcb3b7d24fc before 8ba8db9786b55047df5ad3db3e01dd886687a77d; from 4c5211a100399c3823563193dd881dcb3b7d24fc before edbb3226c985469a2f8eb69885055c9f5550f468; from 4c5211a100399c3823563193dd881dcb3b7d24fc before c915c46a25c3efb084c4f5e69a053d7f7a635496; from 4c5211a100399c3823563193dd881dcb3b7d24fc before 4f1490a5d7a0472ee5d9f36547bc4ba46be755c7; and 1 more ranges	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.3 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/17c2650de14842c25c569cbb2126c421489a3a24	patch
https://git.kernel.org/stable/c/daf21394f9898fb9f0698c3e50de08132d2164e6	patch
https://git.kernel.org/stable/c/610f20e5cf35ca9c0992693cae0dd8643ce932e7	patch
https://git.kernel.org/stable/c/b8505a1aee8f1edc9d16d72ae09c93de086e2a1a	patch
https://git.kernel.org/stable/c/8ba8db9786b55047df5ad3db3e01dd886687a77d	patch
https://git.kernel.org/stable/c/edbb3226c985469a2f8eb69885055c9f5550f468	patch
https://git.kernel.org/stable/c/c915c46a25c3efb084c4f5e69a053d7f7a635496	patch
https://git.kernel.org/stable/c/4f1490a5d7a0472ee5d9f36547bc4ba46be755c7	patch
https://git.kernel.org/stable/c/87399f1ff92203d65f1febf5919429f4bb613a02	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.