CVE-2024-35905

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail. This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

• CWE-129
• CWE-190

• https://git.kernel.org/stable/c/203a68151e8eeb331d4a64ab78303f3a15faf103Patch
• https://git.kernel.org/stable/c/37dc1718dc0c4392dbfcb9adec22a776e745dd69Patch
• https://git.kernel.org/stable/c/3f0784b2f1eb9147973d8c43ba085c5fdf44ff69Patch
• https://git.kernel.org/stable/c/98cdac206b112bec63852e94802791e316acc2c1Patch
• https://git.kernel.org/stable/c/9970e059af471478455f9534e8c3db82f8c5496dPatch
• https://git.kernel.org/stable/c/ecc6a2101840177e57c925c102d2d29f260d37c8Patch
• https://git.kernel.org/stable/c/203a68151e8eeb331d4a64ab78303f3a15faf103Patch
• https://git.kernel.org/stable/c/37dc1718dc0c4392dbfcb9adec22a776e745dd69Patch
• https://git.kernel.org/stable/c/3f0784b2f1eb9147973d8c43ba085c5fdf44ff69Patch
• https://git.kernel.org/stable/c/98cdac206b112bec63852e94802791e316acc2c1Patch
• https://git.kernel.org/stable/c/9970e059af471478455f9534e8c3db82f8c5496dPatch
• https://git.kernel.org/stable/c/ecc6a2101840177e57c925c102d2d29f260d37c8Patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlMailing List
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Published

May 19, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3590The LetterPress WordPress plugin through 1.2.2 does not hav…6.1
• CVE-2024-35900In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35901In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35902In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35903In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35904In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35906Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-35907In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35908In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35909In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-3591The Geo Controller WordPress plugin before 8.6.5 unserialize…6.5
• CVE-2024-35910In the Linux kernel, the following vulnerability has been re…5.8