PT-2024-26782 · Linux+1 · Linux Kernel+1

Published 2024-05-19 · Updated 2025-01-21 · CVE-2024-35923

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the io uring feature. The issue occurs when failure happens before the opcode prep handler is called, and it is necessary to clear the opcode specific area of the request to prevent errors. This ensures that opcode handlers can clear per-request private data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2024-35923

INFSA-2024_9315

RHSA-2024:9315

RHSA-2024_9315

Affected Products

Linux Kernel

Red Hat

References · 15

• 🔥❌ https://github.com/marcinguy/CVE-2020-10135-BIAS · Exploit, Deleted
• https://linux.oracle.com/errata/ELSA-2024-9315.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-35923 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35923 · Security Note
• https://ubuntu.com/security/CVE-2024-35923 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35923 · Vendor Advisory
• https://git.kernel.org/linus/e21e1c45e1fe2e31732f40256b49c04e76a17cee · Note
• https://twitter.com/VulmonFeeds/status/1792170781796954279 · Twitter Post
• https://git.kernel.org/stable/c/cb1cd176e0b431644653a7fa8691a1aaf7be98da · Note
• https://lore.kernel.org/linux-cve-announce/2024051914-CVE-2024-35923-ddae@gregkh/T · Note
• https://git.kernel.org/stable/c/21162ad2de7446438cbd6224b3794a375bcb24df · Note
• https://t.me/cvenotify/80389 · Telegram Post
• https://git.kernel.org/stable/c/e21e1c45e1fe2e31732f40256b49c04e76a17cee · Note
• https://git.kernel.org/stable/c/5245a6da27ef79f8dba98dad5542ebe56d311837 · Note
• https://twitter.com/CVEnew/status/1792140378432520486 · Twitter Post