01 Record

CVE-2024-35983

bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 14.7% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2024-05-20 09:47Z2 YR AGO
Last updated: 2026-05-23 15:45Z3 MO AGO
Reserved: 2024-05-17
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 1e254d7a1fe58048e94e1c4fec017d048b9b42f492c4c4d5594feb52d2129c28

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxd6077e0d38b4953c863d0db4a5b3f41d21e0d546 to < d34a516f2635090d36a306f84573e8de3d7374ce, 83a2275f9d3230c761014b1467888b1ef469be74 to < 66297b2ceda841f809637731d287bda3a93b49d8, d2a7a81088c6abe778b0a93a7eeb79487a943818 to < 93ba36238db6a74a82feb3dc476e25ea424ad630, 428ca0000f0abd5c99354c52a36becf2b815ca21 to < 9b7c5004d7c5ae062134052a85290869a015814c, b46c822f8b555b9513df44047b0e72c06720df62 to < 15aa09d6d84629eb5296de30ac0aa19a33512f16, cf778fff03be1ee88c49b72959650147573c3301 to < ebfe41889b762f1933c6762f6624b9724a25bee0, f2d5dcb48f7ba9e3ff249d58fc1fa963d374e66a to < 5af385f5f4cddf908f663974847a4083b2ff2c79, b2e1b090a590d41abe647eadb6bf2a5dc47b63ab, 6.7.12 to < 6.8, 5.4.274 to < 5.4.275, 5.10.215 to < 5.10.216, 5.15.154 to < 5.15.158, 6.1.84 to < 6.1.90, 6.6.24 to < 6.6.30, 6.8.3 to < 6.8.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d34a516f2635090d36a306f84573e8de3d7374ce
git.kernel.orghttps://git.kernel.org/stable/c/66297b2ceda841f809637731d287bda3a93b49d8
git.kernel.orghttps://git.kernel.org/stable/c/93ba36238db6a74a82feb3dc476e25ea424ad630
git.kernel.orghttps://git.kernel.org/stable/c/9b7c5004d7c5ae062134052a85290869a015814c
git.kernel.orghttps://git.kernel.org/stable/c/15aa09d6d84629eb5296de30ac0aa19a33512f16
git.kernel.orghttps://git.kernel.org/stable/c/ebfe41889b762f1933c6762f6624b9724a25bee0
git.kernel.orghttps://git.kernel.org/stable/c/5af385f5f4cddf908f663974847a4083b2ff2c79
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-613116.html

01 Record index

CVE-2024-35983

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-35983

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References