Register for the AI for Security Summit: Join Figma, Perplexity & Wiz

CVE-2024-35787
Linux Kernel vulnerability analysis and mitigation

Overview

A vulnerability in the Linux kernel's MD (Multiple Device) subsystem, specifically within the bitmap handling code, was discovered and assigned CVE-2024-35787. The issue was identified in May 2024 and stems from incorrect usage of sb_index in the md-bitmap code. The vulnerability affects the Linux kernel's software RAID functionality, particularly in clustered environments (Kernel Git).

Technical details

The vulnerability was introduced when commit d7038f951828 removed page->index from bitmap code but left incorrect code logic for clustered-md. The issue causes the code to never set slot offset for cluster nodes, which can lead to system crashes in clustered environments. The problem manifests in the md_bitmap_file_set_bit function and related call paths, including md_bitmap_startwrite and raid1_make_request functions (Kernel Git).

Impact

When exploited, this vulnerability can cause system crashes in clustered environments using Linux software RAID configurations. The impact is primarily focused on system availability, as it can trigger kernel crashes during bitmap operations in clustered MD setups (NVD).

Exploitability

The vulnerability requires access to a clustered environment using Linux software RAID with bitmap functionality. It can be triggered during normal system operations involving bitmap file operations in the MD subsystem (Ubuntu).

Mitigation and workarounds

The issue has been fixed in various Linux kernel versions. Ubuntu has released patches for affected systems, including version 6.8.0-35.35 for Ubuntu 24.04 LTS noble and similar updates for other distributions. Users are advised to update their systems to the patched versions (Ubuntu).

Additional resources

Linux Distribution fix status

Fix availability across major Linux distributions and their releases.

Debian

Fixed

bookworm

linux

Fixed

bullseye

linux

Fixed

sid

linux: 6.7.12-1

Fixed

trixie

linux: 6.7.12-1

Fixed

SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-89775CRITICAL9.3
  • Linux Kernel logoLinux Kernel
  • kernel-rt-debug-modules
NoNoSep 16, 2026
CVE-2026-89771HIGH7.8
  • Linux Kernel logoLinux Kernel
  • kernel-rt-modules-internal
NoNoSep 11, 2026
CVE-2026-89912HIGH7.1
  • Linux Kernel logoLinux Kernel
  • kernel-debug-modules-internal
NoYesSep 16, 2026
CVE-2026-89772HIGH7
  • Linux Kernel logoLinux Kernel
  • linux-hwe-7.0
NoNoSep 11, 2026
CVE-2026-89773MEDIUM5.5
  • Linux Kernel logoLinux Kernel
  • linux-xilinx
NoYesSep 11, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management