CVE-2024-35962
- Source
- https://cve.org/CVERecord?id=CVE-2024-35962
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-35962.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-35962
- Downstream
- Related
- Published
- 2024-05-20T09:41:53Z
- Modified
- 2026-08-12T03:30:49Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- netfilter: complete validation of user input
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
netfilter: complete validation of user input
In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls.
In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check:
if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35962.json" }- References
-
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
- https://git.kernel.org/stable/c/562b7245131f6e9f1d280c8b5a8750f03edfc05c
- https://git.kernel.org/stable/c/65acf6e0501ac8880a4f73980d01b5d27648b956
- https://git.kernel.org/stable/c/89242d9584c342cb83311b598d9e6b82572eadf8
- https://git.kernel.org/stable/c/97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7
- https://git.kernel.org/stable/c/c760089aa98289b4b88a7ff5a62dd92845adf223
- https://git.kernel.org/stable/c/cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35962.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-35962
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced0f038242b77ddfc505bf4163d4904c1abd2e74d6Fixedcf4bc359b76144a3dd55d7c09464ef4c5f2b2b05
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced440e948cf0eff32cfe322dcbca3f2525354b159bFixed97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced18aae2cb87e5faa9c5bd865260ceadac60d5a6c5Fixedc760089aa98289b4b88a7ff5a62dd92845adf223
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced81d51b9b7c95e791ba3c1a2dd77920a9d3b3f525Fixed89242d9584c342cb83311b598d9e6b82572eadf8
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced58f2bfb789e6bd3bc24a2c9c1580f3c67aec3018Fixed562b7245131f6e9f1d280c8b5a8750f03edfc05c
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced0c83842df40f86e529db6842231154772c20edccFixed65acf6e0501ac8880a4f73980d01b5d27648b956
Linux / Kernel
Package
- Name
- Kernel