CVE-2024-35948
published 2024-05-20CVE-2024-35948: In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.22%
12.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
bcachefs: Check for journal entries overruning end of sb clean section
Fix a missing bounds check in superblock validation.
Note that we don't yet have repair code for this case - repair code for
individual items is generally low priority, since the whole superblock
is checksummed, validated prior to write, and we have backups.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.9.7-1 (forky) | linux 6.9.7-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= 1c6fdbd8f2465ddfb73a01ec620cbf3d14044e1a < fcdbc1d7a4b638e5d5668de461f320386f3002aa | fcdbc1d7a4b638e5d5668de461f320386f3002aa |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.9.7-1 | 6.9.7-1 |
| linux | linux_kernel | >= 0 < 6.9.7-1 | 6.9.7-1 |
| linux | linux_kernel | >= 6.7 < 6.9 | 6.9 |
| ubuntu | linux-nvidia-tegra | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.4HIGH
vendor_ubuntu9.1CRITICAL
vendor_debian8.4LOW
vendor_redhat8.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.8 bcachefs memory corruption (fcdbc1d7a4b6)
vuldb·2026-08-06·CVSS 7.8
CVE-2024-35948 [HIGH] Linux Kernel up to 6.8 bcachefs memory corruption (fcdbc1d7a4b6)
A vulnerability was found in Linux Kernel up to 6.8. It has been declared as critical. Affected by this issue is some unknown functionality of the component bcachefs. Executing a manipulation can lead to memory corruption.
This vulnerability is tracked as CVE-2024-35948. The attack is only possible within the local network. No exploit exists.
It is recommended to upgrade the affected component.
GHSA
GHSA-m2qc-57j3-6fh6: In the Linux kernel, the following vulnerability has been resolved:
bcachefs: Check for journal entries overruning end of sb clean section
Fix a mis
ghsa_unreviewed·2024-05-20
CVE-2024-35948 [HIGH] CWE-400 GHSA-m2qc-57j3-6fh6: In the Linux kernel, the following vulnerability has been resolved:
bcachefs: Check for journal entries overruning end of sb clean section
Fix a mis
In the Linux kernel, the following vulnerability has been resolved:
bcachefs: Check for journal entries overruning end of sb clean section
Fix a missing bounds check in superblock validation.
Note that we don't yet have repair code for this case - repair code for
individual items is generally low priority, since the whole superblock
is checksummed, validated prior to write, and we have backups.
OSV
CVE-2024-35948: In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missi
osv·2024-05-20·CVSS 8.4
CVE-2024-35948 [HIGH] CVE-2024-35948: In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missi
In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low priority, since the whole superblock is checksummed, validated prior to write, and we have backups.
Ubuntu
Linux kernel (NVIDIA Tegra) vulnerabilities
vendor_ubuntu·2026-09-18·CVSS 9.1
CVE-2026-53358 [CRITICAL] Linux kernel (NVIDIA Tegra) vulnerabilities
Title: Linux kernel (NVIDIA Tegra) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been revoked, bypassing memory protections or escalating privileges.
(CVE-2025-10263)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- PowerPC architecture;
- RIS
Red Hat
kernel: bcachefs: Check for journal entries overruning end of sb clean section
vendor_redhat·2024-05-20·CVSS 8.4
CVE-2024-35948 [HIGH] CWE-20 kernel: bcachefs: Check for journal entries overruning end of sb clean section
kernel: bcachefs: Check for journal entries overruning end of sb clean section
In the Linux kernel, the following vulnerability has been resolved:
bcachefs: Check for journal entries overruning end of sb clean section
Fix a missing bounds check in superblock validation.
Note that we don't yet have repair code for this case - repair code for
individual items is generally low priority, since the whole superblock
is checksummed, validated prior to write, and we have backups.
A flaw was found in the bcachefs module in the Linux kernel. Missing bounds check in the superblock validation allows a local user to cause a denial of service.
Statement: The bcachefs module is not built in the kernel shipped in Red Hat Enterprise Linux, so it is not affected by this vulnerability.
Package: kernel (R
Debian
CVE-2024-35948: linux - In the Linux kernel, the following vulnerability has been resolved: bcachefs: C...
vendor_debian·2024·CVSS 8.4
CVE-2024-35948 [HIGH] CVE-2024-35948: linux - In the Linux kernel, the following vulnerability has been resolved: bcachefs: C...
In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low priority, since the whole superblock is checksummed, validated prior to write, and we have backups.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.9.7-1)
sid: resolved (fixed in 6.9.7-1)
trixie: resolved (fixed in 6.9.7-1)
No detection rules found.
No public exploits indexed.
2024-05-20
Published