PT-2024-8499 · Linux+4 · Linux Kernel+4

Stefan Orear · Published 2024-04-04 · Updated 2026-01-22 · CVE-2024-35871

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel has a flaw related to a potential information leak. Specifically, the childregs registers, which represent the registers active for a new thread in user context, can expose the kernel's global pointer (gp) value in certain scenarios. This is due to the kernel execve function not clearing integer registers, potentially revealing the gp value to user space after execve or through other means like ptrace or performance tracing. This issue affects kernel threads and user mode helper threads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2024-10059

CVE-2024-35871

DLA-3842-1

OESA-2024-1707

OESA-2024-2295

USN-6893-1

USN-6893-2

USN-6893-3

USN-6898-1

USN-6898-2

USN-6898-3

USN-6898-4

USN-6917-1

USN-6918-1

USN-6919-1

USN-6927-1

USN-7019-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 825

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35871.json · Exploit
• https://ubuntu.com/security/CVE-2024-35984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26999 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26817 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35954 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35968 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36889 · Security Note
• https://ubuntu.com/security/CVE-2024-27398 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory