CVE-2024-35947: debian debian_linux
CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2024-35947DEBIAN-CVE-2024-35947
Published 19-05-2024Last modified 11-05-2026
Vulnerability summary
CVE-2024-35947 is a medium (CVSS 5.5) vulnerability in debian debian_linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 17.5% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)EPSS score
0.27%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 40 · Related 31DLA-3840-1DLA-3843-1DSA-5703-1MGASA-2024-0263MGASA-2024-0266RHSA-2024:5101RHSA-2024:5102RHSA-2024:9315RHSA-2025:2270SUSE-SU-2024:2008-1SUSE-SU-2024:2019-1SUSE-SU-2024:2135-1SUSE-SU-2024:2190-1SUSE-SU-2024:2203-1SUSE-SU-2024:2493-1SUSE-SU-2024:2561-1SUSE-SU-2024:2901-1SUSE-SU-2024:2973-1SUSE-SU-2025:20008-1SUSE-SU-2025:20028-1SUSE-SU-2025:20166-1SUSE-SU-2025:20249-1USN-6949-1USN-6949-2USN-6950-1USN-6950-2USN-6950-3USN-6950-4USN-6951-1USN-6951-2USN-6951-3USN-6951-4USN-6952-1USN-6952-2USN-6953-1USN-6955-1USN-6956-1USN-6957-1USN-6979-1USN-7019-1
Timeline
- 19-05-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUG_ON in >control parser Fix a BUG_ON from 2009. Even if it looks "unreachable" (I didn't really look), lets make sure by removing it, doing pr_err and return -EINVAL instead.
CVSS metrics
4 scores · 4 sources · 1 versionMedium 5.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
18%
Versus all other CVEs
30-day change
0.00 pp
From 0.27% on 18-09-2026
18-09-202618-10-2026
EPSS score0.27%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu129 products
- linuxAll versions (No fix recorded) | < 5.4.0-192.212 | < 5.15.0-118.128 | < 6.8.0-40.40
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1130.140 | < 5.15.0-1067.73 | < 6.8.0-1013.14
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.94-1 | < 6.8.11-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ 9898abb3d23311fa227a7f46bf4e40fd2954057f, < 3c718bddddca9cbef177ac475b94c5c91147fb38 | ≥ 9898abb3d23311fa227a7f46bf4e40fd2954057f, < 343081c21e56bd6690d342e2f5ae8c00183bf081 | ≥ 9898abb3d23311fa227a7f46bf4e40fd2954057f, < 41d8ac238ab1cab01a8c71798d61903304f4e79b | ≥ 9898abb3d23311fa227a7f46bf4e40fd2954057f, < ba3c118cff7bcb0fe6aa84ae1f9080d50e31c561 | ≥ 9898abb3d23311fa227a7f46bf4e40fd2954057f, < a66c869b17c4c4dcf81d273b02cb0efe88e127ab | ≥ 9898abb3d23311fa227a7f46bf4e40fd2954057f, < a69e1bdd777ce51061111dc419801e8a2fd241cc | ≥ 9898abb3d23311fa227a7f46bf4e40fd2954057f, < 529e1852785599160415e964ca322ee7add7aef0 | ≥ 9898abb3d23311fa227a7f46bf4e40fd2954057f, < 00e7d3bea2ce7dac7bee1cf501fb071fd0ea8f6c | 2.6.30
- linux_kernel< 4.19.314 | ≥ 4.20, < 5.4.276 | ≥ 5.5, < 5.10.217 | ≥ 5.11, < 5.15.159 | ≥ 5.16, < 6.1.91 | ≥ 6.2, < 6.6.31 | ≥ 6.7, < 6.8..10 | 6.9:rc1 | 6.9:rc2 | 6.9:rc3 | 6.9:rc4 | 6.9:rc5 | 6.9:rc6
Fedoraproject1 product
- fedoraEOL40
4 vendors · 134 products
References
33 links- lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlX TransferredMailing ListThird Party Advisory
Show all 33 references
- lists.debian.org/debian-lts-announce/2024/06/msg00019.htmlX TransferredMailing ListThird Party Advisory