CVE-2024-35905: debian debian_linux Improper Validation of Array Index
Vulnerability summary
CVE-2024-35905 is a high (CVSS 7.8) Improper Validation of Array Index vulnerability in debian debian_linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 72 · Related 70Timeline
- 19-05-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail. This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
0.00 pp
From 0.22% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-129Improper Validation of Array IndexThe product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
- CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Affected systems
Ubuntu108 products
- linux< 5.15.0-116.126 | < 6.8.0-38.38
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1065.71 | < 6.8.0-1011.12
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.85-1 | < 6.8.9-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ afea95d319ccb4ad2060dece9ac5e2e364dec543, < 9970e059af471478455f9534e8c3db82f8c5496d | ≥ 02962684258eb53f414a8a59854767be526e6abb, < 37dc1718dc0c4392dbfcb9adec22a776e745dd69 | ≥ b1d4d54d32ce6342f5faffe71bae736540ce7cb5, < 98cdac206b112bec63852e94802791e316acc2c1 | ≥ 08b91babccbb168353f8d43fea0ed28a4cad568c, < 3f0784b2f1eb9147973d8c43ba085c5fdf44ff69 | ≥ a833a17aeac73b33f79433d7cee68d5cafd71e4f, < 203a68151e8eeb331d4a64ab78303f3a15faf103 | ≥ a833a17aeac73b33f79433d7cee68d5cafd71e4f, < ecc6a2101840177e57c925c102d2d29f260d37c8 | 1858b8a331937f3976d8482cd5f6e1f945294ad3 | ≥ 5.10.209, < 5.10.215 | ≥ 5.15.148, < 5.15.154 | ≥ 6.1.75, < 6.1.85 | ≥ 6.6.14, < 6.6.26 | ≥ 6.7.2, < 6.8 | 6.8
- linux_kernel≥ 5.10.209, < 5.10.215 | ≥ 5.15.148, < 5.15.154 | ≥ 6.1.75, < 6.1.85 | ≥ 6.6.14, < 6.6.26 | ≥ 6.7.2, < 6.8.5 | 6.9:rc1
3 vendors · 112 products
