PT-2024-26783 · Linux+8 · Linux Kernel+8

Published 2024-02-17 · Updated 2026-05-26 · CVE-2024-35924

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel, specifically the UCSI (USB Type-C Interface) component. Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGE IN region was increased from 16 to 256. To avoid overflowing reads for older systems, a mechanism was added to use the read UCSI version to truncate read sizes on UCSI v1.2.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Out of bounds Read

Weakness Enumeration

CWE-119

CWE-125

Related Identifiers

ALSA-2024:5101

ALSA-2024:5102

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2026-01451

CESA-2024_5101

CESA-2024_5102

CVE-2024-35924

ECHO-3496-BCCF-A9C5

INFSA-2024_5101

INFSA-2024_5102

INFSA-2024_9315

OESA-2024-1706

OESA-2024-1707

RHSA-2024:5101

RHSA-2024:5102

RHSA-2024:9315

RHSA-2024_5101

RHSA-2024_5102

RHSA-2024_9315

RHSA-2025:10701

RLSA-2024:5101

RLSA-2024:5102

RXSA-2024:5101

SUSE-SU-2024:2008-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2135-1

SUSE-SU-2024:2190-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20249-1

USN-6893-1

USN-6893-2

USN-6893-3

USN-6918-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 4109

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35924.json · Exploit
• https://ubuntu.com/security/notices/USN-6893-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35966 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-5101.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27399 · Security Note
• https://ubuntu.com/security/CVE-2024-27019 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35886 · Security Note
• https://osv.dev/vulnerability/USN-6893-3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35855 · Security Note
• https://ubuntu.com/security/CVE-2024-27022 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:5102 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36906 · Security Note
• https://bdu.fstec.ru/vul/2026-01451 · Security Note
• https://ubuntu.com/security/CVE-2024-35896 · Vendor Advisory