CVE-2024-35935CWE-209

CVE-2024-35935

Low · published May 19, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: send: handle path ref underflow in header iterate_inode_ref()

Change BUG_ON to proper error handling if building the path buffer

fails. The pointers are not printed so we don't accidentally leak kernel

addresses.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2024-05-19T15:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel< 4.19.3124.19.312
linux/linux_kernel≥ 4.20, < 5.4.2745.4.274
linux/linux_kernel≥ 5.5, < 5.10.2155.10.215
linux/linux_kernel≥ 5.11, < 5.15.1555.15.155
linux/linux_kernel≥ 5.16, < 6.1.866.1.86
linux/linux_kernel≥ 6.2, < 6.6.276.6.27
linux/linux_kernel≥ 6.7, < 6.8.66.8.6
debian/debian_linuxall versions—
References (19)
https://git.kernel.org/stable/c/024529c27c8b4b273325a169e078337c8279e229 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/03938619a1e718b6168ae4528e1b0f979293f1a5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3c6ee34c6f9cd12802326da26631232a61743501 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4720d590c4cb5d9ffa0060b89743651cc7e995f9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9ae356c627b493323e1433dcb27a26917668c07c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/be2b6bcc936ae17f42fff6494106a5660b35d8d3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c1363ed8867b81ea169fba2ccc14af96a85ed183 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/024529c27c8b4b273325a169e078337c8279e229 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/03938619a1e718b6168ae4528e1b0f979293f1a5 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/3c6ee34c6f9cd12802326da26631232a61743501 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4720d590c4cb5d9ffa0060b89743651cc7e995f9 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9ae356c627b493323e1433dcb27a26917668c07c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/be2b6bcc936ae17f42fff6494106a5660b35d8d3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c1363ed8867b81ea169fba2ccc14af96a85ed183 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 19 MAY 10:10Z
    btrfs: send: handle path ref underflow in header iterate_inode_ref()
    cvelistv5