CVE-2024-35947

dyndbg: fix old BUG_ON in >control parser

State: Published
Severity: 5.5 Medium
Published: May 19, 2024
Updated: May 11, 2026
Reserved: May 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

dyndbg: fix old BUG_ON in >control parser

Fix a BUG_ON from 2009. Even if it looks "unreachable" (I didn't really look), lets make sure by removing it, doing pr_err and return -EINVAL instead.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9898abb3d23311fa227a7f46bf4e40fd2954057f to before 3c718bddddca9cbef177ac475b94c5c91147fb38Affected 9898abb3d23311fa227a7f46bf4e40fd2954057f to before 343081c21e56bd6690d342e2f5ae8c00183bf081Affected 9898abb3d23311fa227a7f46bf4e40fd2954057f to before 41d8ac238ab1cab01a8c71798d61903304f4e79bAffected 9898abb3d23311fa227a7f46bf4e40fd2954057f to before ba3c118cff7bcb0fe6aa84ae1f9080d50e31c561Affected 9898abb3d23311fa227a7f46bf4e40fd2954057f to before a66c869b17c4c4dcf81d273b02cb0efe88e127abAffected 9898abb3d23311fa227a7f46bf4e40fd2954057f to before a69e1bdd777ce51061111dc419801e8a2fd241ccAffected 9898abb3d23311fa227a7f46bf4e40fd2954057f to before 529e1852785599160415e964ca322ee7add7aef0Affected 9898abb3d23311fa227a7f46bf4e40fd2954057f to before 00e7d3bea2ce7dac7bee1cf501fb071fd0ea8f6cAffected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 4.19.314 through 4.19.Not affected 5.4.276 through 5.4.Not affected 5.10.217 through 5.10.Not affected 5.15.159 through 5.15.Not affected 6.1.91 through 6.1.Not affected 6.6.31 through 6.6.Not affected 6.8.10 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

9898abb3d23311fa227a7f46bf4e40fd2954057f to before 3c718bddddca9cbef177ac475b94c5c91147fb38Affected
9898abb3d23311fa227a7f46bf4e40fd2954057f to before 343081c21e56bd6690d342e2f5ae8c00183bf081Affected
9898abb3d23311fa227a7f46bf4e40fd2954057f to before 41d8ac238ab1cab01a8c71798d61903304f4e79bAffected
9898abb3d23311fa227a7f46bf4e40fd2954057f to before ba3c118cff7bcb0fe6aa84ae1f9080d50e31c561Affected
9898abb3d23311fa227a7f46bf4e40fd2954057f to before a66c869b17c4c4dcf81d273b02cb0efe88e127abAffected
9898abb3d23311fa227a7f46bf4e40fd2954057f to before a69e1bdd777ce51061111dc419801e8a2fd241ccAffected
9898abb3d23311fa227a7f46bf4e40fd2954057f to before 529e1852785599160415e964ca322ee7add7aef0Affected
9898abb3d23311fa227a7f46bf4e40fd2954057f to before 00e7d3bea2ce7dac7bee1cf501fb071fd0ea8f6cAffected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
4.19.314 through 4.19.*Not affected
5.4.276 through 5.4.*Not affected
5.10.217 through 5.10.*Not affected
5.15.159 through 5.15.*Not affected
6.1.91 through 6.1.*Not affected
6.6.31 through 6.6.*Not affected
6.8.10 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.