CVE-2024-35893

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a kernel-infoleak vulnerability in the Linux kernel, specifically in the net/sched component. The vulnerability occurs because the tcf skbmod dump() function copies four bytes from the kernel stack to user space, and the struct tc skbmod has a four-byte hole. To fix this, the structure needs to be cleared before filling fields. The vulnerability was discovered by syzbot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.