CVE-2024-35983
bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 May 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
bits_per() rounds up to the next power of two when passed a power of
two. This causes crashes on some machines and configurations.
Affected products
Linux · LinuxReferences
https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-613116.htmlhttps://git.kernel.org/stable/c/15aa09d6d84629eb5296de30ac0aa19a33512f16https://git.kernel.org/stable/c/5af385f5f4cddf908f663974847a4083b2ff2c79https://git.kernel.org/stable/c/66297b2ceda841f809637731d287bda3a93b49d8https://git.kernel.org/stable/c/93ba36238db6a74a82feb3dc476e25ea424ad630https://git.kernel.org/stable/c/9b7c5004d7c5ae062134052a85290869a015814chttps://git.kernel.org/stable/c/d34a516f2635090d36a306f84573e8de3d7374cehttps://git.kernel.org/stable/c/ebfe41889b762f1933c6762f6624b9724a25bee0https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html