In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux
  • Rhel Eus

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-0:4.18.0-553.16.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:5101 2024-08-08T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.33.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:5928 2024-08-28T00:00:00Z
kernel-0:5.14.0-427.33.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:5928 2024-08-28T00:00:00Z
Red Hat Enterprise Linux 9.2 Extended Update Support
kernel-0:5.14.0-284.77.1.el9_2 cpe:/a:redhat:rhel_eus:9.2 RHSA-2024:5066 2024-08-07T00:00:00Z
kernel-rt-0:5.14.0-284.77.1.rt14.362.el9_2 cpe:/a:redhat:rhel_eus:9.2::nfv RHSA-2024:5067 2024-08-07T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/562b7245131f6e9f1d280c8b5a8750f03edfc05c cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/65acf6e0501ac8880a4f73980d01b5d27648b956 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/89242d9584c342cb83311b598d9e6b82572eadf8 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/c760089aa98289b4b88a7ff5a62dd92845adf223 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05 cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052020-CVE-2024-35962-e5ce@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-35962 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-35962 cve-icon
History

Sat, 14 Sep 2024 02:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 28 Aug 2024 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat enterprise Linux

Wed, 07 Aug 2024 22:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_eus:9.2

Wed, 07 Aug 2024 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.2::nfv
Vendors & Products Redhat
Redhat rhel Eus
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-20T09:41:53.207Z

Updated: 2024-09-11T17:33:14.037Z

Reserved: 2024-05-17T13:50:33.137Z

Link: CVE-2024-35962

cve-icon Vulnrichment

Updated: 2024-08-02T03:21:49.038Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-20T10:15:11.327

Modified: 2024-06-25T22:15:33.823

Link: CVE-2024-35962

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-20T00:00:00Z

Links: CVE-2024-35962 - Bugzilla