PT-2024-8358 · Linux+9 · Linux Kernel+9

Nicolas Pitre · Published 2024-03-02 · Updated 2025-11-07 · CVE-2024-35823

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to unicode buffer corruption when deleting characters in the Linux kernel's vt component. This corruption can lead to a denial of service. The problem arises due to overlapping buffers and can be resolved by replacing memcpy() with memmove().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

ALSA-2024:5101

ALSA-2024:5363

ALSA-2025_16880

BDU:2024-09917

CESA-2024_5101

CVE-2024-35823

DLA-3840-1

DLA-3842-1

INFSA-2024_5101

INFSA-2024_5363

OESA-2024-1692

OESA-2024-1693

OESA-2024-1694

RHSA-2024:10262

RHSA-2024:5066

RHSA-2024:5067

RHSA-2024:5101

RHSA-2024:5363

RHSA-2024:6297

RHSA-2024_5101

RHSA-2024_5363

RLSA-2024:5101

RLSA-2024:5363

RXSA-2024:5101

SUSE-SU-2024:2008-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2135-1

SUSE-SU-2024:2190-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20249-1

USN-6896-1

USN-6896-2

USN-6896-3

USN-6896-4

USN-6896-5

USN-6898-1

USN-6898-2

USN-6898-3

USN-6898-4

USN-6917-1

USN-6919-1

USN-6927-1

USN-7019-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 4668

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35823.json · Exploit
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47357 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52655 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-27020 · Security Note
• https://ubuntu.com/security/CVE-2024-26766 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52645 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36489 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26970 · Vendor Advisory
• https://git.kernel.org/stable/c/0190d19d7651c08abc187dac3819c61b726e7e3f · Patch
• https://ubuntu.com/security/CVE-2024-38596 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52875 · Security Note