Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2024-35869: Linux kernel could let attackers gain full system control
CVE-2024-35869 · published 1 day ago
Summary
The Linux kernel used in Ubuntu 22.04 and related packages can be tricked into letting an attacker take complete control of the server. This could expose data, disrupt services, or allow further attacks. Install the latest kernel updates from your Linux distribution as soon as possible to close the risk.
What to do
- Update debian rootio-linux to version 6.1.164-1.root.io.108.
- Update canonical linux-azure-6.8 to version 6.8.0-1010.10~22.04.1.
- Update linux kernel to version 6.8.5.
- Update canonical linux-aws-6.8 to version 6.8.0-1011.12~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1009.9~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1008.8~22.04.1.
- Update canonical linux to version 6.8.0-38.38.
- Update canonical linux-aws to version 6.8.0-1011.12.
- Update canonical linux-azure to version 6.8.0-1010.10.
- Update canonical linux-gcp to version 6.8.0-1010.11.
- Update canonical linux-gke to version 6.8.0-1006.9.
- Update canonical linux-ibm to version 6.8.0-1008.8.
- Update canonical linux-intel to version 6.8.0-1007.14.
- Update canonical linux-lowlatency to version 6.8.0-38.38.1.
- Update canonical linux-nvidia to version 6.8.0-1009.9.
- Update canonical linux-oem-6.8 to version 6.8.0-1008.8.
- Update canonical linux-oracle to version 6.8.0-1008.8.
- Update canonical linux-raspi to version 6.8.0-1007.7.
- Update canonical linux-riscv to version 6.8.0-38.38.1.
- Update canonical linux-raspi-realtime to version 6.8.0-2006.6.
- Update canonical linux-realtime to version 6.8.1-1004.4.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update debian linux to version 6.8.9-1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux linux to version 645f332c6b63499cc76197f9b6bffcc659ba64cc or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.164-1.root.io.108 Fix: upgrade to 6.1.164-1.root.io.108
|
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1010.10~22.04.1 Fix: upgrade to 6.8.0-1010.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde | All versions |
| Linux | linux | kernel |
>= 6.7.0, < 6.8.5 Fix: upgrade to 6.8.5
|
| – | linux | linux |
< 645f332c6b63499cc76197f9b6bffcc659ba64cc 6.4 |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
Showing 50 of 111. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1011.12~22.04.1 Fix: upgrade to 6.8.0-1011.12~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1009.9~22.04.1 Fix: upgrade to 6.8.0-1009.9~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1008.8~22.04.1 Fix: upgrade to 6.8.0-1008.8~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-38.38 Fix: upgrade to 6.8.0-38.38
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1011.12 Fix: upgrade to 6.8.0-1011.12
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1010.11 Fix: upgrade to 6.8.0-1010.11
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1006.9 Fix: upgrade to 6.8.0-1006.9
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1008.8 Fix: upgrade to 6.8.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-intel |
< 6.8.0-1007.14 Fix: upgrade to 6.8.0-1007.14
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-38.38.1 Fix: upgrade to 6.8.0-38.38.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1009.9 Fix: upgrade to 6.8.0-1009.9
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1008.8 Fix: upgrade to 6.8.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1008.8 Fix: upgrade to 6.8.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1007.7 Fix: upgrade to 6.8.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-38.38.1 Fix: upgrade to 6.8.0-38.38.1
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2006.6 Fix: upgrade to 6.8.0-2006.6
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1004.4 Fix: upgrade to 6.8.1-1004.4
|
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 Fix: upgrade to 5.10.247-1.root.io.42
|
| Debian:13 | debian | linux |
< 6.8.9-1 Fix: upgrade to 6.8.9-1
|
| – | linux | linux_kernel |
>= 6.2.8, < 6.3 >= 6.4, < 6.6.29 >= 6.7, < 6.8.5 6.9 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
Original advisory text
CVE-2024-35869 in linux - Patched by Root
Root has patched CVE-2024-35869 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
References
- https://ubuntu.com/security/notices/USN-6918-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6893-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6893-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6893-2 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-35869 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35869... Vendor Advisory
- https://git.kernel.org/linus/062a7f0ff46eb57aff526897bd2bebfdb1d3046a Third Party Advisory
- https://git.kernel.org/stable/c/062a7f0ff46eb57aff526897bd2bebfdb1d3046a URL
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/645f332c6b63499cc76197f9b6bffcc659ba64cc URL
- https://ubuntu.com/security/CVE-2024-35869 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-35869 Third Party Advisory
- https://git.kernel.org/stable/c/e1db9ae87b7148c021daee1fcc4bc71b2ac58a79 URL
- https://security-tracker.debian.org/tracker/CVE-2024-35869 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-416Use After Free
Timeline
Published9 Oct 2026
Updated9 Oct 2026
First seen6 Mar 2026
Sources
CVE-2024-35869 · OSV
UBUNTU-CVE-2024-35869 · OSV
CVE-2024-35869 · MITRE
CVE-2024-35869 · NVD
DEBIAN-CVE-2024-35869 · OSV
Track software like this
Free during beta