Review reviewHigh

CVE-2024-35948

Linux Linux, linux_kernel, linux kernel

In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low priority, since the whole superblock is checksummed, validated prior to write, and we have backups.

CVSS: 7.8
EPSS: 0.22%
CISA KEV: Not listed
Published: 2024.05.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.22%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux_kernel, linux kernel
Affected versions: >= 1c6fdbd8f2465ddfb73a01ec620cbf3d14044e1a < fcdbc1d7a4b638e5d5668de461f320386f3002aa, >= 6.7, >= 1da177e4c3f4 < fcdbc1d7a4b6, >= 6.7 < 6.9, 6.9
Fixed versions: 6.9

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux_kernel, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-400