CVE-2024-35889

CVE-2024-35889

High · published May 19, 2024

CVSS v3.1
8.6
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix kernel panic on unknown packet types

In the very rare case where a packet type is unknown to the driver,

idpf_rx_process_skb_fields would return early without calling

eth_type_trans to set the skb protocol / the network layer handler.

This is especially problematic if tcpdump is running when such a

packet is received, i.e. it would cause a kernel panic.

Instead, call eth_type_trans for every single packet, even when

the packet type is unknown.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.2th percentile
Published
2024-05-19T13:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.7, < 6.8.56.8.5
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 19 MAY 08:34Z
    idpf: fix kernel panic on unknown packet types
    cvelistv5