CVE-2024-35962

In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;

• https://git.kernel.org/stable/c/562b7245131f6e9f1d280c8b5a8750f03edfc05cPatch
• https://git.kernel.org/stable/c/65acf6e0501ac8880a4f73980d01b5d27648b956Patch
• https://git.kernel.org/stable/c/89242d9584c342cb83311b598d9e6b82572eadf8Patch
• https://git.kernel.org/stable/c/97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7Patch
• https://git.kernel.org/stable/c/c760089aa98289b4b88a7ff5a62dd92845adf223Patch
• https://git.kernel.org/stable/c/cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05Patch
• https://git.kernel.org/stable/c/562b7245131f6e9f1d280c8b5a8750f03edfc05cPatch
• https://git.kernel.org/stable/c/65acf6e0501ac8880a4f73980d01b5d27648b956Patch
• https://git.kernel.org/stable/c/89242d9584c342cb83311b598d9e6b82572eadf8Patch
• https://git.kernel.org/stable/c/97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7Patch
• https://git.kernel.org/stable/c/c760089aa98289b4b88a7ff5a62dd92845adf223Patch
• https://git.kernel.org/stable/c/cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05Patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlMailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html
• https://cert-portal.siemens.com/productcert/html/ssa-613116.html

Published

May 20, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35957In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35958In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35959In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-3596RADIUS Protocol under RFC 2865 is susceptible to forgery att…9
• CVE-2024-35960In the Linux kernel, the following vulnerability has been re…9.1
• CVE-2024-35961In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35963In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-35964In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-35965In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-35966In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-35967In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-35968In the Linux kernel, the following vulnerability has been re…5.5