PT-2024-26754 · Linux+5 · Linux Kernel+5

Greg Edwards + 1 · Published 2024-02-29 · Updated 2026-05-26 · CVE-2024-35826

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an incorrect number of pages being released for buffers that do not start at the beginning of a page in the Linux kernel. This is fixed by correcting page refcounts for unaligned buffers in the bio release pages() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-67824

BDU:2026-04263

CVE-2024-35826

OPENSUSE-SU-2025_1177-1

OPENSUSE-SU-2025_1178-1

OPENSUSE-SU-2025_1180-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:1177-1

SUSE-SU-2025:1178-1

SUSE-SU-2025:1180-1

SUSE-SU-2025:20190-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20260-1

SUSE-SU-2025:20270-1

SUSE-SU-2025_1177-1

SUSE-SU-2025_1178-1

SUSE-SU-2025_1180-1

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1440

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35826.json · Exploit
• https://ubuntu.com/security/CVE-2024-35798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26816 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26870 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26874 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-23307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27058 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27388 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26954 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52649 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27389 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26956 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26890 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26957 · Vendor Advisory