PT-2024-8381 · Linux+7 · Linux Kernel+7

Chengming Zhou + 1 · Published 2024-03-26 · Updated 2025-09-29 · CVE-2024-35797

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the cachestat component in the Linux kernel, which can cause errors when racing with swapping and invalidation. There are two possible bugs: a swapin error can result in a poisoned swap entry, leading to an out-of-bounds access, and a valid swap entry might not exist yet, sending a NULL to workingset test recent() and potentially resulting in a false "recently evicted" count. This could lead to code clarity issues and potentially affect the robustness of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALSA-2024:6567

ALSA-2025_16880

BDU:2024-09940

CVE-2024-35797

INFSA-2024_6567

RHSA-2024:6567

RHSA-2024_6567

RLSA-2024:6567

RXSA-2024:6567

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

Affected Products

Almalinux

Astra Linux

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 346

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35797.json · Exploit
• https://ubuntu.com/security/CVE-2024-27048 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26899 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27068 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26938 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27043 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26814 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35797 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35811 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26954 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26973 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27044 · Vendor Advisory