CVE-2024-35996

In the Linux kernel, the following vulnerability has been resolved: cpu: Re-enable CPU mitigations by default for !X86 architectures Rename x86's to CPU_MITIGATIONS, define it in generic code, and force it on for all architectures exception x86. A recent commit to turn mitigations off by default if SPECULATION_MITIGATIONS=n kinda sorta missed that "cpu_mitigations" is completely generic, whereas SPECULATION_MITIGATIONS is x86-specific. Rename x86's SPECULATIVE_MITIGATIONS instead of keeping both and have it select CPU_MITIGATIONS, as having two configs for the same thing is unnecessary and confusing. This will also allow x86 to use the knob to manage mitigations that aren't strictly related to speculative execution. Use another Kconfig to communicate to common code that CPU_MITIGATIONS is already defined instead of having x86's menu depend on the common CPU_MITIGATIONS. This allows keeping a single point of contact for all of x86's mitigations, and it's not clear that other architectures *want* to allow disabling mitigations at compile-time.

• https://git.kernel.org/stable/c/36b32816fbab267611f073223f1b0b816ec5920fPatch
• https://git.kernel.org/stable/c/38f17d1fbb5bfb56ca1419e2d06376d57a9396f9Patch
• https://git.kernel.org/stable/c/8292f4f8dd1b005d0688d726261004f816ef730aPatch
• https://git.kernel.org/stable/c/af6d6a923b40bf6471e44067ac61cc5814b48e7fPatch
• https://git.kernel.org/stable/c/fd8547ebc187037cc69441a15c1441aeaab80f49Patch
• https://git.kernel.org/stable/c/fe42754b94a42d08cf9501790afc25c4f6a5f631Patch
• https://git.kernel.org/stable/c/36b32816fbab267611f073223f1b0b816ec5920fPatch
• https://git.kernel.org/stable/c/38f17d1fbb5bfb56ca1419e2d06376d57a9396f9Patch
• https://git.kernel.org/stable/c/8292f4f8dd1b005d0688d726261004f816ef730aPatch
• https://git.kernel.org/stable/c/af6d6a923b40bf6471e44067ac61cc5814b48e7fPatch
• https://git.kernel.org/stable/c/fd8547ebc187037cc69441a15c1441aeaab80f49Patch
• https://git.kernel.org/stable/c/fe42754b94a42d08cf9501790afc25c4f6a5f631Patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlMailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html
• https://cert-portal.siemens.com/productcert/html/ssa-613116.html

Published

May 20, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35990In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35991In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35992In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35993In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35994In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35995In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35997In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35998In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35999In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2024-3600The Poll Maker – Best WordPress Poll Plugin plugin for WordP…6.1
• CVE-2024-36000In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36001In the Linux kernel, the following vulnerability has been re…7.8