PT-2024-26753 · Linux · Linux Kernel

Published 2024-05-17 · Updated 2024-05-25 · CVE-2024-35820

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the io uring feature. The issue involves the io queue proc() function modifying the req->flags variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-35820

Affected Products

Linux Kernel

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-35820 · Security Note
• https://ubuntu.com/security/CVE-2024-35820 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-35820 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35820 · Vendor Advisory
• https://git.kernel.org/stable/c/0ecb8919469e6d5c74eea24086b34ce1bda5aef7 · Note
• https://git.kernel.org/stable/c/1a8ec63b2b6c91caec87d4e132b1f71b5df342be · Note
• https://twitter.com/CVEnew/status/1791762321871888857 · Twitter Post
• https://git.kernel.org/linus/1a8ec63b2b6c91caec87d4e132b1f71b5df342be · Note
• https://git.kernel.org/stable/c/51a490a7f63cae0754120e7c04f4f47920bd48db · Note