CVE-2024-35962

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-35962
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35962.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-35962
Downstream
Related
Published
2024-05-20T09:41:53.207Z
Modified
2025-11-20T05:08:12.931656Z
Summary
netfilter: complete validation of user input
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: complete validation of user input

In my recent commit, I missed that doreplace() handlers use copyfromsockptr() (which I fixed), followed by unsafe copyfromsockptroffset() calls.

In all functions, we can perform the @optlen validation before even calling xtalloctable_info() with the following check:

if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0f038242b77ddfc505bf4163d4904c1abd2e74d6
Fixed
cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
440e948cf0eff32cfe322dcbca3f2525354b159b
Fixed
97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
18aae2cb87e5faa9c5bd865260ceadac60d5a6c5
Fixed
c760089aa98289b4b88a7ff5a62dd92845adf223
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
81d51b9b7c95e791ba3c1a2dd77920a9d3b3f525
Fixed
89242d9584c342cb83311b598d9e6b82572eadf8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
58f2bfb789e6bd3bc24a2c9c1580f3c67aec3018
Fixed
562b7245131f6e9f1d280c8b5a8750f03edfc05c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0c83842df40f86e529db6842231154772c20edcc
Fixed
65acf6e0501ac8880a4f73980d01b5d27648b956

Affected versions

v5.*

v5.10.215
v5.15.154
v5.15.155

v6.*

v6.1.85
v6.1.86
v6.6.26
v6.6.27
v6.8.5
v6.8.6
v6.9-rc2

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-030370aa",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-06556219",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-0bfc1ec6",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-0d111a8b",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-1055b403",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-1446a400",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-18b75359",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-1c1520b9",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-1c33369d",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-1e890b2a",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-25e27e48",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-393c7d27",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-3f066c1d",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-5199211e",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-5a0edd6a",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-5be201c5",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-5cd3e9d7",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-62874ad5",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-64d300ca",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-68120555",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-6919267d",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-7df5eef8",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-81d2c7ef",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-86c4cd0b",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-9914694d",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-99456557",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-9b799328",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-9bf2b5b4",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-9e1fa743",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-a1341626",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-addd60be",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c760089aa98289b4b88a7ff5a62dd92845adf223",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-b5bf75e1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf4bc359b76144a3dd55d7c09464ef4c5f2b2b05",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-ca4d286d",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-cc770c19",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-d08cf010",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-d42a0b9b",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-dddc5210",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-e18cc622",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-e215a3f0",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-e5eab39d",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "compat_do_replace"
        },
        "digest": {
            "length": 1028.0,
            "function_hash": "273006832057654551434009602876586368603"
        },
        "id": "CVE-2024-35962-e7d52063",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/ip_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-ed0d4ef0",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65acf6e0501ac8880a4f73980d01b5d27648b956",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c",
            "function": "do_replace"
        },
        "digest": {
            "length": 1011.0,
            "function_hash": "219511824452516864492171327612883231635"
        },
        "id": "CVE-2024-35962-f1065119",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97dab36e57c64106e1c8ebd66cbf0d2d1e52d6b7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv4/netfilter/arp_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-f63681b1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "net/ipv6/netfilter/ip6_tables.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072",
                "248476338346218527045592263968930474655",
                "275825686098356172091908375220234738324",
                "209990013704040840857547358326702947794",
                "254673205131634113211118246769611770072"
            ]
        },
        "id": "CVE-2024-35962-f96fa5ea",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89242d9584c342cb83311b598d9e6b82572eadf8",
        "signature_version": "v1"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.10.215
Fixed
5.10.216
Type
ECOSYSTEM
Events
Introduced
5.15.154
Fixed
5.15.156
Type
ECOSYSTEM
Events
Introduced
6.1.85
Fixed
6.1.87
Type
ECOSYSTEM
Events
Introduced
6.6.26
Fixed
6.6.28
Type
ECOSYSTEM
Events
Introduced
6.8.5
Fixed
6.8.7