CVE-2024-35947

In the Linux kernel, the following vulnerability has been resolved:

dyndbg: fix old BUG_ON in >control parser

The Linux kernel CVE team has assigned CVE-2024-35947 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051952-CVE-2024-35947-09bb@gregkh/T

This vulnerability is rated as having a Low severity because triggering the assertion failure requires privileged local access to write to the kernel's dynamic debug control interface. In default Red Hat Enterprise Linux installations, the debugfs filesystem and dynamic debug control endpoints are restricted to root or processes with administrative privileges. Consequently, unprivileged local users cannot exploit this flaw to crash the system or escalate privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.