CVE-2024-35871

🗓️ 19 May 2024 08:34:29Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 102 Views🌐 WEB

Linux kernel riscv vulnerability fix for kernel gp leakage in user mod

Reporter	Title	Published	Views	Family All 96
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the riscv component in the Linux operating system’s kernel allows a hacker to trigger a service failure.	21 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-35871	3 Dec 202514:14	–	circl
CNNVD	Linux kernel 安全漏洞	19 May 202400:00	–	cnnvd
Cvelist	CVE-2024-35871 riscv: process: Fix kernel gp leakage	19 May 202408:34	–	cvelist
Debian	[SECURITY] [DLA 3842-1] linux-5.10 security update	25 Jun 202419:41	–	debian
Debian CVE	CVE-2024-35871	19 May 202408:34	–	debiancve
Tenable Nessus	Debian dla-3842 : linux-config-5.10 - security update	27 Jun 202400:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0084)	9 Jun 202500:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)	25 Jul 202500:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange4.15–5.10.216

linux linux_kernelRange5.11–5.15.154

linux linux_kernelRange5.16–6.1.85

linux linux_kernelRange6.2–6.6.26

linux linux_kernelRange6.7–6.8.5

linux linux_kernelMatch6.9rc1

linux linux_kernelMatch6.9rc2

Node

debian debian_linuxMatch10.0

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/riscv/kernel/process.c"
    ],
    "versions": [
      {
        "version": "7db91e57a0acde126a162ababfb1e0ab190130cb",
        "lessThan": "9abc3e6f1116adb7a2d4fbb8ce20c37916976bf5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7db91e57a0acde126a162ababfb1e0ab190130cb",
        "lessThan": "dff6072124f6df77bfd36951fbd88565746980ef",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7db91e57a0acde126a162ababfb1e0ab190130cb",
        "lessThan": "f6583444d7e78dae750798552b65a2519ff3ca84",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7db91e57a0acde126a162ababfb1e0ab190130cb",
        "lessThan": "00effef72c98294edb1efa87ffa0f6cfb61b36a4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7db91e57a0acde126a162ababfb1e0ab190130cb",
        "lessThan": "d8dcba0691b8e42bddb61aab201e4d918a08e5d9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7db91e57a0acde126a162ababfb1e0ab190130cb",
        "lessThan": "d14fa1fcf69db9d070e75f1c4425211fa619dfc8",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/riscv/kernel/process.c"
    ],
    "versions": [
      {
        "version": "4.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.15",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.216",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.154",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.85",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.26",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.8.5",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/00effef72c98294edb1efa87ffa0f6cfb61b36a4
git	www.git.kernel.org/stable/c/9abc3e6f1116adb7a2d4fbb8ce20c37916976bf5
git	www.git.kernel.org/stable/c/d8dcba0691b8e42bddb61aab201e4d918a08e5d9
git	www.git.kernel.org/stable/c/f6583444d7e78dae750798552b65a2519ff3ca84
git	www.git.kernel.org/stable/c/d14fa1fcf69db9d070e75f1c4425211fa619dfc8
git	www.git.kernel.org/stable/c/dff6072124f6df77bfd36951fbd88565746980ef
lists	www.lists.debian.org/debian-lts-announce/2024/06/msg00017.html

Parameter	Position	Path	Description	CWE
gp	path	/proc//task//syscall	Access to user-space gp/pt_regs via the syscall interface can leak kernel addresses when observing user-mode helpers before exec completes.	CWE-200
pt_regs	path	/proc//task//syscall	Access to user-space gp/pt_regs via the syscall interface can leak kernel addresses when observing user-mode helpers before exec completes.	CWE-200

17 Jun 2026 07:35Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.1

EPSS0.00264

SSVC