What is CVE-2024-35962?

CVE-2024-35962 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 5.10.215 onward and patched in 5.10.216, 5.15.156, 6.1.87 and others. CVE-2024-35962 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-35962?

CVE-2024-35962 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2024-35962?

Yes, CVE-2024-35962 has been patched. Fixed versions include 5.10.216, 5.15.156, 6.1.87 and others. If you are running Linux kernel 5.10.215 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-35962 actively exploited?

CVE-2024-35962 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-35962

Medium

In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;

Package Linux Kernel

Published 2024-05-20

Last modified 2026-05-12

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions

Linux kernel versions 5.10.215, 5.15.154, 6.1.85, 6.6.26, 6.8.5 and later are affected. Fixed in 5.10.216, 5.15.156, 6.1.87, 6.6.28, 6.8.7 and their respective stable series.

Affected from

≥ 5.10.215 ≥ 5.15.154 ≥ 6.1.85 ≥ 6.6.26 ≥ 6.8.5

Fixed in

✓ 5.10.216 5.10.x ✓ 5.15.156 5.15.x ✓ 6.1.87 6.1.x ✓ 6.6.28 6.6.x ✓ 6.8.7 6.8.x

References

9 total

Kernel Git
https://git.kernel.org/stable/c/562b7245131f6e9f1d280c8b5a8750f03edfc05c

Patch
Kernel Git
https://git.kernel.org/stable/c/65acf6e0501ac8880a4f73980d01b5d27648b956

Patch
Kernel Git
https://git.kernel.org/stable/c/89242d9584c342cb83311b598d9e6b82572eadf8

Patch
Kernel Git
https://git.kernel.org/stable/c/97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7

Patch
Kernel Git
https://git.kernel.org/stable/c/c760089aa98289b4b88a7ff5a62dd92845adf223

Patch

Showing 5 of 9 references View all on NVD

Details

CVE ID CVE-2024-35962

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-05-20

Modified 2026-05-12

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-35962?

CVE-2024-35962 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 5.10.215 onward and has been patched in 5.10.216, 5.15.156, 6.1.87 and others. CVE-2024-35962 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-35962?

CVE-2024-35962 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2024-35962?

Yes. CVE-2024-35962 has been patched. Fixed versions include 5.10.216, 5.15.156, 6.1.87 and others. If you are running Linux kernel 5.10.215 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-35962 actively exploited?

No. CVE-2024-35962 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.