CVE-2024-35935

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.

CVSS 3.1

3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-25)

CWE

CWE-209

Published

2024-05-19

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• debian:debian_linux
• linux:linux_kernel

References

• https://git.kernel.org/stable/c/024529c27c8b4b273325a169e078337c8279e229
• https://git.kernel.org/stable/c/03938619a1e718b6168ae4528e1b0f979293f1a5
• https://git.kernel.org/stable/c/2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a
• https://git.kernel.org/stable/c/3c6ee34c6f9cd12802326da26631232a61743501
• https://git.kernel.org/stable/c/4720d590c4cb5d9ffa0060b89743651cc7e995f9

Check your stackJSON