CVE-2024-35947
Linux Kernel BUG_ON Vulnerability in DynDEBUG Control Parser
Description
In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUG_ON in >control parser Fix a BUG_ON from 2009. Even if it looks "unreachable" (I didn't really look), lets make sure by removing it, doing pr_err and return -EINVAL instead.
INFO
Published Date :
May 19, 2024, 12:15 p.m.
Last Modified :
April 4, 2025, 2:23 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
Affected Products
The following products are affected by CVE-2024-35947
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-35947.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-35947 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-35947 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Apr. 04, 2025
Action Type Old Value New Value Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.31 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.276 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.19.314 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.217 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.159 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.91 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.8..10 *cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:* Added CPE Configuration OR *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Added CPE Configuration OR *cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* Added Reference Type CVE: https://git.kernel.org/stable/c/00e7d3bea2ce7dac7bee1cf501fb071fd0ea8f6c Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/00e7d3bea2ce7dac7bee1cf501fb071fd0ea8f6c Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/343081c21e56bd6690d342e2f5ae8c00183bf081 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/343081c21e56bd6690d342e2f5ae8c00183bf081 Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/3c718bddddca9cbef177ac475b94c5c91147fb38 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/3c718bddddca9cbef177ac475b94c5c91147fb38 Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/41d8ac238ab1cab01a8c71798d61903304f4e79b Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/41d8ac238ab1cab01a8c71798d61903304f4e79b Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/529e1852785599160415e964ca322ee7add7aef0 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/529e1852785599160415e964ca322ee7add7aef0 Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/a66c869b17c4c4dcf81d273b02cb0efe88e127ab Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/a66c869b17c4c4dcf81d273b02cb0efe88e127ab Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/a69e1bdd777ce51061111dc419801e8a2fd241cc Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/a69e1bdd777ce51061111dc419801e8a2fd241cc Types: Patch Added Reference Type CVE: https://git.kernel.org/stable/c/ba3c118cff7bcb0fe6aa84ae1f9080d50e31c561 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ba3c118cff7bcb0fe6aa84ae1f9080d50e31c561 Types: Patch Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html Types: Mailing List, Third Party Advisory Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Types: Mailing List, Third Party Advisory Added Reference Type CVE: https://lists.fedoraproject.org/archives/list/[email protected]/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ Types: Mailing List, Third Party Advisory -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/00e7d3bea2ce7dac7bee1cf501fb071fd0ea8f6c Added Reference https://git.kernel.org/stable/c/343081c21e56bd6690d342e2f5ae8c00183bf081 Added Reference https://git.kernel.org/stable/c/3c718bddddca9cbef177ac475b94c5c91147fb38 Added Reference https://git.kernel.org/stable/c/41d8ac238ab1cab01a8c71798d61903304f4e79b Added Reference https://git.kernel.org/stable/c/529e1852785599160415e964ca322ee7add7aef0 Added Reference https://git.kernel.org/stable/c/a66c869b17c4c4dcf81d273b02cb0efe88e127ab Added Reference https://git.kernel.org/stable/c/a69e1bdd777ce51061111dc419801e8a2fd241cc Added Reference https://git.kernel.org/stable/c/ba3c118cff7bcb0fe6aa84ae1f9080d50e31c561 Added Reference https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html Added Reference https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Added Reference https://lists.fedoraproject.org/archives/list/[email protected]/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 05, 2024
Action Type Old Value New Value Removed Reference kernel.org https://lists.fedoraproject.org/archives/list/[email protected]/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ Removed Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Removed Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Nov. 04, 2024
Action Type Old Value New Value Added CVSS V3.1 CISA-ADP AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 27, 2024
Action Type Old Value New Value Added Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html [No types assigned] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 27, 2024
Action Type Old Value New Value Added Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html [No types assigned] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 10, 2024
Action Type Old Value New Value Added Reference kernel.org https://lists.fedoraproject.org/archives/list/[email protected]/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ [No types assigned] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 29, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 19, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUG_ON in >control parser Fix a BUG_ON from 2009. Even if it looks "unreachable" (I didn't really look), lets make sure by removing it, doing pr_err and return -EINVAL instead. Added Reference kernel.org https://git.kernel.org/stable/c/3c718bddddca9cbef177ac475b94c5c91147fb38 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/343081c21e56bd6690d342e2f5ae8c00183bf081 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/41d8ac238ab1cab01a8c71798d61903304f4e79b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ba3c118cff7bcb0fe6aa84ae1f9080d50e31c561 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a66c869b17c4c4dcf81d273b02cb0efe88e127ab [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a69e1bdd777ce51061111dc419801e8a2fd241cc [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/529e1852785599160415e964ca322ee7add7aef0 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/00e7d3bea2ce7dac7bee1cf501fb071fd0ea8f6c [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-35947 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-35947
weaknesses.