PT-2024-26756 · Linux+1 · Linux Kernel+1

Published 2024-01-16 · Updated 2026-05-26 · CVE-2024-35832

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.7.0-rc7-custom+

Description The vulnerability is related to the bcachefs filesystem in the Linux kernel. The issue arises from the incorrect freeing of memory allocated for bch fs::snapshots using kfree instead of kvfree. This can lead to a page fault when the umount command is executed. The vulnerability is identified by the error message "BUG: unable to handle page fault for address" and is associated with a supervisor read access in kernel mode.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the bcachefs vulnerability. Ensure that the bch fs::snapshots memory is freed using kvfree instead of kfree to prevent page faults during the umount process.

Note: The provided information does not specify the exact version that includes the fix, so it is recommended to update to the latest available version of the Linux kernel.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-763

CWE-119

Related Identifiers

BDU:2025-08088

CVE-2024-35832

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35832.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2024-35832 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-35832 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-35832 · Vendor Advisory
• https://git.kernel.org/stable/c/56590678791119b9a655202e49898edfb9307271 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-35832 · Security Note
• https://git.kernel.org/stable/c/369acf97d6fd5da620d053d0f1878ffe32eff555 · Patch
• https://ubuntu.com/security/CVE-2024-35832 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-35832 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-35832 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2024-35832 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35832 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08088 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note