Log in Start free

Vulnerability · Published May 20, 2024 · Assigned by Linux

CVE-2024-35948bcachefs: Check for journal entries overruning end of sb clean section

High 7.8

In plain English

A high-severity uncontrolled resource consumption in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 86.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low priority, since the whole superblock is checksummed, validated prior to write, and we have backups.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.9.7-1DEBIAN-CVE-2024-35948
Debian:14linux6.9.7-1DEBIAN-CVE-2024-35948
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38UBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38USN-8781-1
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-35948
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2024-35948
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2024-35948

Affected products (as reported)

VendorProductVersions
Linux Linux 1c6fdbd8f2465ddfb73a01ec620cbf3d14044e1a – before fcdbc1d7a4b638e5d5668de461f320386f3002aa
Linux Linux 6.7

Weakness: CWE-400 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References