In the Linux kernel, the following vulnerability has been resolved:

btrfs: send: handle path ref underflow in header iterate_inode_ref()

Change BUG_ON to proper error handling if building the path buffer
fails. The pointers are not printed so we don't accidentally leak kernel
addresses.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00058.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux
  • Linux Kernel
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/024529c27c8b4b273325a169e078337c8279e229 cve-icon cve-icon
https://git.kernel.org/stable/c/03938619a1e718b6168ae4528e1b0f979293f1a5 cve-icon cve-icon
https://git.kernel.org/stable/c/2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a cve-icon cve-icon
https://git.kernel.org/stable/c/3c6ee34c6f9cd12802326da26631232a61743501 cve-icon cve-icon
https://git.kernel.org/stable/c/4720d590c4cb5d9ffa0060b89743651cc7e995f9 cve-icon cve-icon
https://git.kernel.org/stable/c/9ae356c627b493323e1433dcb27a26917668c07c cve-icon cve-icon
https://git.kernel.org/stable/c/be2b6bcc936ae17f42fff6494106a5660b35d8d3 cve-icon cve-icon
https://git.kernel.org/stable/c/c1363ed8867b81ea169fba2ccc14af96a85ed183 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024051917-CVE-2024-35935-cdbd@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-35935 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-35935 cve-icon
History

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Wed, 06 Nov 2024 08:15:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 10 Oct 2024 02:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-209
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

 cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

threat_severity

Low

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T09:08:46.079Z

Reserved: 2024-05-17T13:50:33.130Z

Link: CVE-2024-35935

cve-icon Vulnrichment

Updated: 2024-08-02T03:21:49.026Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-19T11:15:49.413

Modified: 2024-11-21T09:21:14.350

Link: CVE-2024-35935

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-19T00:00:00Z

Links: CVE-2024-35935 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-07-13T11:06:17Z