PT-2024-8759 · Linux+5 · Linux Kernel+5

Xiuhong Wang · Published 2024-03-12 · Updated 2026-03-14 · CVE-2024-35844

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vulnerability is related to the compress component of the Linux kernel and is caused by an incorrect calculation in the reserve cblocks counting when out of space. This issue can lead to a file becoming unrepairable if it only needs one direct node and certain operations are performed. The vulnerability can be exploited to cause a denial of service. The issue is resolved by setting the fsck flag to fix the problem after a patch is applied.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-682

Related Identifiers

BDU:2024-10365

CVE-2024-35844

OESA-2024-1680

OESA-2024-1681

OESA-2024-1682

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6820-1

USN-6820-2

USN-6821-1

USN-6821-2

USN-6821-3

USN-6821-4

USN-6828-1

USN-6871-1

USN-6878-1

USN-6892-1

USN-6919-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 676

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35844.json · Exploit
• https://ubuntu.com/security/CVE-2024-35984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27048 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35936 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35997 · Security Note
• https://ubuntu.com/security/CVE-2023-52642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26999 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26817 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26751 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52844 · Security Note
• https://ubuntu.com/security/CVE-2024-35811 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26954 · Vendor Advisory