CVE-2024-35828— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1496 · Resource HijackingAffected Version Matrix 20
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 876c9d3aeb989cf1961f2c228d309ba5dcfb1172< 96481624fb5a6319079fb5059e46dbce43a90186 | affected |
876c9d3aeb989cf1961f2c228d309ba5dcfb1172< bea9573c795acec5614d4ac2dcc7b3b684cea5bf | affected | ||
876c9d3aeb989cf1961f2c228d309ba5dcfb1172< f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | affected | ||
876c9d3aeb989cf1961f2c228d309ba5dcfb1172< e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | affected | ||
876c9d3aeb989cf1961f2c228d309ba5dcfb1172< 4d99d267da3415db2124029cb5a6d2d955ca43f9 | affected | ||
876c9d3aeb989cf1961f2c228d309ba5dcfb1172< da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | affected | ||
876c9d3aeb989cf1961f2c228d309ba5dcfb1172< d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | affected | ||
876c9d3aeb989cf1961f2c228d309ba5dcfb1172< 8e243ac649c10922a6b4855170eaefe4c5b3faab | affected | ||
| … +12 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-35828の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() In the for statement of lbs_allocate_cmd_buffer(), if the allocation of cmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs to be freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于内存泄漏。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2024-35828の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-35828のインテリジェンス情報
请登录查看更多情报信息。
CVE-2024-35828 邮件列表归档 (2)
CVE-2024-35828 其他参考 (9)
Same Patch Batch · Linux · 2024-05-17 · 135 CVEs total
| CVE-2023-52687 | 9.8 CRITICAL | crypto: safexcel - Add error handling for dma_map_sg() calls |
| CVE-2024-35843 | 8.8 HIGH | iommu/vt-d: Use device rbtree in iopf reporting path |
| CVE-2024-35804 | 8.8 HIGH | KVM: x86: Mark target gfn of emulated atomic instruction as dirty |
| CVE-2024-35811 | 8.8 HIGH | wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach |
| CVE-2024-27416 | 8.8 HIGH | Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST |
| CVE-2024-27415 | 8.8 HIGH | netfilter: bridge: confirm multicast packets before passing them up the stack |
| CVE-2024-35856 | 8.8 HIGH | Bluetooth: btusb: mediatek: Fix double free of skb in coredump |
| CVE-2024-35834 | 8.2 HIGH | xsk: recycle buffer in case Rx queue was full |
| CVE-2024-27404 | 8.2 HIGH | mptcp: fix data races on remote_id |
| CVE-2023-52669 | 8.2 HIGH | crypto: s390/aes - Fix buffer overread in CTR mode |
| CVE-2024-35789 | 8.0 HIGH | wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes |
| CVE-2024-35793 | 7.8 HIGH | debugfs: fix wait/cancellation handling during remove |
| CVE-2023-52676 | 7.8 HIGH | bpf: Guard stack limits against 32bit overflow |
| CVE-2024-35810 | 7.8 HIGH | drm/vmwgfx: Fix the lifetime of the bo cursor memory |
| CVE-2024-35808 | 7.8 HIGH | md/dm-raid: don't call md_reap_sync_thread() directly |
| CVE-2023-52667 | 7.8 HIGH | net/mlx5e: fix a potential double-free in fs_any_create_groups |
| CVE-2024-35798 | 7.8 HIGH | btrfs: fix race in read_extent_buffer_pages() |
| CVE-2024-35791 | 7.8 HIGH | KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() |
| CVE-2024-35839 | 7.8 HIGH | netfilter: bridge: replace physindev with physinif in nf_bridge_info |
| CVE-2024-35835 | 7.8 HIGH | net/mlx5e: fix a double-free in arfs_create_groups |
Showing 20 of 135 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
同じベンダー: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. CVE-2024-35828へのコメント
まだコメントはありません