SARA / Free Tools / CVE / CVE-2024-35856

CVE-2024-35856 — In the Linux kernel, the following vulnerability has been resolved:

In the Linux kernel, the following vulnerability has been resolved:

CVSS

— —

EPSS

7.00% (top 79.00%)

CWE

—

Published

2024-05-17T14:47:32.088Z

Last modified

2025-05-04T09:06:57.177Z

CVSS vector

—

01What is this vulnerability?

In the Linux kernel, the following vulnerability has been resolved:

Vendor	Product	Versions
Linux	Linux	0b70151328781a89c89e4cf3fae21fc0e98d869e, 0b70151328781a89c89e4cf3fae21fc0e98d869e, 0b70151328781a89c89e4cf3fae21fc0e98d869e
Linux	Linux	6.6, 0, 6.6.30, 6.8.9, 6.9

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

Patch to a fixed version listed in the vendor advisory (see references below).
Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
Hunt historical logs for exploitation indicators — see Detection signatures below.

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

git.kernel.org — https://git.kernel.org/stable/c/80dfef128cb9f1b1ef67c0fe8c8deb4ea7ad30c1
git.kernel.org — https://git.kernel.org/stable/c/e20093c741d8da9f6390dd45d75b779861547035
git.kernel.org — https://git.kernel.org/stable/c/18bdb386a1a30e7a3d7732a98e45e69cf6b5710d

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.