CVE-2024-43835

5.5 · MEDIUM

Published Aug 17, 2024 linux EPSS 0.25% (16th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-43835 is a medium-severity vulnerability affecting linux linux_kernel. It was published on August 17, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

virtio_net: Fix napi_skb_cache_put warning

After the commit bdacf3e34945 ("net: Use nested-BH locking for

napi_alloc_cache.") was merged, the following warning began to appear:

WARNING: CPU: 5 PID: 1 at net/core/skbuff.c:1451 napi_skb_cache_put+0x82/0x4b0

__warn+0x12f/0x340

napi_skb_cache_put+0x82/0x4b0

report_bug+0x165/0x370

handle_bug+0x3d/0x80

exc_invalid_op+0x1a/0x50

asm_exc_invalid_op+0x1a/0x20

__free_old_xmit+0x1c8/0x510

napi_skb_cache_put+0x82/0x4b0

__free_old_xmit+0x1c8/0x510

__pfx___free_old_xmit+0x10/0x10

The issue arises because virtio is assuming it's running in NAPI context

even when it's not, such as in the netpoll case.

To resolve this, modify virtnet_poll_tx() to only set NAPI when budget

is available. Same for virtnet_poll_cleantx(), which always assumed that

it was in a NAPI context.

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 5.0, < 6.10.3	Affected

References

Ref git.kernel.org/stable/c/468a729b78895893d0e580ceea49bed8ada2a2bd Ref git.kernel.org/stable/c/6b5325f2457521bbece29499970c0117a648c620 Ref git.kernel.org/stable/c/842a97b5e44f0c8a9fc356fe976e0e13ddcf7783 Ref git.kernel.org/stable/c/cc7340f18e45886121c131227985d64ef666012f Ref git.kernel.org/stable/c/d3af435e8ace119e58d8e21d3d2d6a4e7c4a4baa Ref git.kernel.org/stable/c/f5e9a22d19bb98a7e86034db85eb295e94187caa Ref git.kernel.org/stable/c/f8321fa75102246d7415a6af441872f6637c93ab Ref lists.debian.org/debian-lts-announce/2024/10/msg00003.html Ref lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Frequently Asked Questions

What is CVE-2024-43835?

CVE-2024-43835 is a medium-severity vulnerability affecting linux linux_kernel. It was published on August 17, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-43835?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-43835?

How can CyberStrike help with CVE-2024-43835?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-43835 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719