PT-2024-26821 · Linux+5 · Linux Kernel+5

Ильфат Гаптрахманов

+1

·

Published

2024-04-29

·

Updated

2025-09-29

·

CVE-2024-35983

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37
Description The issue is related to the Linux kernel, where the function bits per() rounds up to the next power of two when passed a power of two, causing crashes on some machines and configurations. This is due to the incorrect number of bits being used for power-of-two CONFIG NR CPUS. The problem affects the Linux kernel and can lead to system crashes.
Recommendations Update to Linux kernel version 6.6.37 or later to resolve the issue. As a temporary workaround, consider disabling the bits per() function or restricting its use until a patch is available. However, since the fixed version is specified, updating to version 6.6.37 or later is the recommended course of action.

Exploit

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2025-03070
CVE-2024-35983
DLA-3842-1
INFSA-2024_9315
MGASA-2024-0263
MGASA-2024-0266
RHSA-2024:9315
RHSA-2024_9315
USN-6949-1
USN-6949-2
USN-6952-1
USN-6952-2
USN-6955-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Ubuntu