What is CVE-2024-35935?

CVE-2024-35935 is a Low severity Linux kernel vulnerability with a CVSS score of 3.3 out of 10, affecting Linux kernel versions from 3.6 onward and patched in 4.19.312, 5.4.274, 5.10.215 and others. CVE-2024-35935 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-35935?

CVE-2024-35935 has a CVSS score of 3.3 out of 10, rated Low severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Is there a patch available for CVE-2024-35935?

Yes, CVE-2024-35935 has been patched. Fixed versions include 4.19.312, 5.4.274, 5.10.215 and others. If you are running Linux kernel 3.6 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-35935 actively exploited?

CVE-2024-35935 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-35935

Low

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.

Package Linux Kernel

Published 2024-05-19

Last modified 2026-05-12

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

3.3

out of 10

Low

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness type

CWE-209

CVE-2024-35935 is classified as CWE-209

See CWE-209 on MITRE CWE for full details on this weakness type.

Affected versions

Linux kernel versions 3.6 and later are affected. Fixed in 4.19.312, 5.4.274, 5.10.215, 5.15.155, 6.1.86, 6.6.27, 6.8.6, 6.9 and their respective stable series.

Affected from

≥ 3.6

Fixed in

✓ 4.19.312 4.19.x ✓ 5.4.274 5.4.x ✓ 5.10.215 5.10.x ✓ 5.15.155 5.15.x ✓ 6.1.86 6.1.x ✓ 6.6.27 6.6.x ✓ 6.8.6 6.8.x ✓ 6.9

References

11 total

Kernel Git
https://git.kernel.org/stable/c/024529c27c8b4b273325a169e078337c8279e229

Patch
Kernel Git
https://git.kernel.org/stable/c/03938619a1e718b6168ae4528e1b0f979293f1a5

Patch
Kernel Git
https://git.kernel.org/stable/c/2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a

Patch
Kernel Git
https://git.kernel.org/stable/c/3c6ee34c6f9cd12802326da26631232a61743501

Patch
Kernel Git
https://git.kernel.org/stable/c/4720d590c4cb5d9ffa0060b89743651cc7e995f9

Patch

Showing 5 of 11 references View all on NVD

Details

CVE ID CVE-2024-35935

Severity Low

CVSS score 3.3 / 10

CVSS version 3.1

Published 2024-05-19

Modified 2026-05-12

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-35935?

CVE-2024-35935 is a Low severity Linux kernel vulnerability with a CVSS score of 3.3 out of 10 . It affects Linux kernel versions from 3.6 onward and has been patched in 4.19.312, 5.4.274, 5.10.215 and others. CVE-2024-35935 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-35935?

CVE-2024-35935 has a CVSS score of 3.3 out of 10, rated Low severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
Is there a patch available for CVE-2024-35935?

Yes. CVE-2024-35935 has been patched. Fixed versions include 4.19.312, 5.4.274, 5.10.215 and others. If you are running Linux kernel 3.6 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-35935 actively exploited?

No. CVE-2024-35935 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.