CVE-2024-35827

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() The "controllen" variable is type size_t (unsigned long). Casting it to int could lead to an integer underflow. The check_add_overflow() function considers the type of the destination which is type int. If we add two positive values and the result cannot fit in an integer then that's counted as an overflow. However, if we cast "controllen" to an int and it turns negative, then negative values *can* fit into an int type so there is no overflow. Good: 100 + (unsigned long)-4 = 96 <-- overflow Bad: 100 + (int)-4 = 96 <-- no overflow I deleted the cast of the sizeof() as well. That's not a bug but the cast is unnecessary.

• CWE-190

• https://git.kernel.org/stable/c/0c8c74bb59e7d77554016efc34c2d10376985e5ePatch
• https://git.kernel.org/stable/c/59a534690ecc3af72c6ab121aeac1237a4adae66Patch
• https://git.kernel.org/stable/c/868ec868616438df487b9e2baa5a99f8662cc47cPatch
• https://git.kernel.org/stable/c/8ede3db5061bb1fe28e2c9683329aafa89d2b1b4Patch
• https://git.kernel.org/stable/c/b6563ad0d599110bd5cf8f56c47d279c3ed796fePatch
• https://git.kernel.org/stable/c/0c8c74bb59e7d77554016efc34c2d10376985e5ePatch
• https://git.kernel.org/stable/c/59a534690ecc3af72c6ab121aeac1237a4adae66Patch
• https://git.kernel.org/stable/c/868ec868616438df487b9e2baa5a99f8662cc47cPatch
• https://git.kernel.org/stable/c/8ede3db5061bb1fe28e2c9683329aafa89d2b1b4Patch
• https://git.kernel.org/stable/c/b6563ad0d599110bd5cf8f56c47d279c3ed796fePatch

Published

May 17, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35821In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35822In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35823In the Linux kernel, the following vulnerability has been re…5.3
• CVE-2024-35824In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35825In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35826In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35828In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35829In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-3583The Simple Like Page Plugin plugin for WordPress is vulnerab…6.4
• CVE-2024-35830In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35831In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35832In the Linux kernel, the following vulnerability has been re…5.5