PT-2024-26796 · Linux+9 · Linux Kernel+9

Published 2024-01-19 · Updated 2026-05-26 · CVE-2024-35946

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer access issue has been resolved in the Linux kernel. The issue occurred when canceling a scan, potentially using a vif that was not scanning. The fix involves using the actual scanning vif.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:5101

ALSA-2024:5102

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

AZL-56172

BDU:2025-03077

CESA-2024_5101

CESA-2024_5102

CVE-2024-35946

ECHO-BCA8-7D7D-CF41

INFSA-2024_5101

INFSA-2024_5102

INFSA-2024_9315

RHSA-2024:5101

RHSA-2024:5102

RHSA-2024:9315

RHSA-2024_5101

RHSA-2024_5102

RHSA-2024_9315

RHSA-2025:8248

RLSA-2024:5101

RLSA-2024:5102

RXSA-2024:5101

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20249-1

USN-6893-1

USN-6893-2

USN-6893-3

USN-6918-1

Affected Products

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 3481

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35946.json · Exploit
• https://ubuntu.com/security/notices/USN-6893-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35966 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-5101.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27019 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6893-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27022 · Vendor Advisory
• https://git.kernel.org/stable/c/4f11c741908dab7dd48fa5a986b210d4fc74ca8d · Patch
• https://errata.rockylinux.org/RLSA-2024:5102 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27003 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2024-35946 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35896 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26982 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-5101.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26994 · Vendor Advisory