Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-35935 Details

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:3.3 LOWVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-265688.html	siemens-SADP
https://git.kernel.org/stable/c/024529c27c8b4b273325a169e078337c8279e229	kernel.org	Patch
https://git.kernel.org/stable/c/03938619a1e718b6168ae4528e1b0f979293f1a5	kernel.org	Patch
https://git.kernel.org/stable/c/2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a	kernel.org	Patch
https://git.kernel.org/stable/c/3c6ee34c6f9cd12802326da26631232a61743501	kernel.org	Patch
https://git.kernel.org/stable/c/4720d590c4cb5d9ffa0060b89743651cc7e995f9	kernel.org	Patch
https://git.kernel.org/stable/c/9ae356c627b493323e1433dcb27a26917668c07c	kernel.org	Patch
https://git.kernel.org/stable/c/be2b6bcc936ae17f42fff6494106a5660b35d8d3	kernel.org	Patch
https://git.kernel.org/stable/c/c1363ed8867b81ea169fba2ccc14af96a85ed183	kernel.org	Patch
https://git.kernel.org/stable/c/024529c27c8b4b273325a169e078337c8279e229	CVE	Patch
https://git.kernel.org/stable/c/03938619a1e718b6168ae4528e1b0f979293f1a5	CVE	Patch
https://git.kernel.org/stable/c/2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a	CVE	Patch
https://git.kernel.org/stable/c/3c6ee34c6f9cd12802326da26631232a61743501	CVE	Patch
https://git.kernel.org/stable/c/4720d590c4cb5d9ffa0060b89743651cc7e995f9	CVE	Patch
https://git.kernel.org/stable/c/9ae356c627b493323e1433dcb27a26917668c07c	CVE	Patch
https://git.kernel.org/stable/c/be2b6bcc936ae17f42fff6494106a5660b35d8d3	CVE	Patch
https://git.kernel.org/stable/c/c1363ed8867b81ea169fba2ccc14af96a85ed183	CVE	Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	CVE	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	CVE	Third Party Advisory

see all 19 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-209	Generation of Error Message Containing Sensitive Information	[email protected]

Affected Products

Product	Versions
linux linux kernel	< 4.19.312 >= 4.20, < 5.4.274 >= 5.5, < 5.10.215 >= 5.11, < 5.15.155 >= 5.16, < 6.1.86
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.
debian debian linux	10.0
CPE cpe:2.3:o:debian:debian_linux:10.0:::::::* Remediation No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	siemens-SADP
May 12, 2026	CVE Modified	siemens-SADP
Dec 23, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Nov 5, 2024	CVE Modified	kernel.org
Jun 27, 2024	CVE Modified	kernel.org
Jun 25, 2024	CVE Modified	kernel.org
May 29, 2024	CVE Modified	kernel.org
May 19, 2024	New CVE Received	kernel.org