Back
CVE-2024-35983bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
- 5.5MediumCVSS base score
- 0.24%Exploitation in 30 daysEPSS · top 85% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS bits_per() rounds up to the next power of two when passed a power of two. This causes crashes on some machines and configurations.
Timeline
ID reserved
By Linux
- 3 days later
· 3 days later
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.24% · top 85% of all CVEs (12 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected d6077e0d38b4953c863d0db4a5b3f41d21e0d546 – < d34a516f2635090d36a306f84573e8de3d7374ce
- affected 83a2275f9d3230c761014b1467888b1ef469be74 – < 66297b2ceda841f809637731d287bda3a93b49d8
- affected d2a7a81088c6abe778b0a93a7eeb79487a943818 – < 93ba36238db6a74a82feb3dc476e25ea424ad630
- affected 428ca0000f0abd5c99354c52a36becf2b815ca21 – < 9b7c5004d7c5ae062134052a85290869a015814c
- affected b46c822f8b555b9513df44047b0e72c06720df62 – < 15aa09d6d84629eb5296de30ac0aa19a33512f16
- affected cf778fff03be1ee88c49b72959650147573c3301 – < ebfe41889b762f1933c6762f6624b9724a25bee0
- affected f2d5dcb48f7ba9e3ff249d58fc1fa963d374e66a – < 5af385f5f4cddf908f663974847a4083b2ff2c79
- affected b2e1b090a590d41abe647eadb6bf2a5dc47b63ab
- affected 6.7.12 – < 6.8
- affected 5.4.274 – < 5.4.275
- affected 5.10.215 – < 5.10.216
- affected 5.15.154 – < 5.15.158
- affected 6.1.84 – < 6.1.90
- affected 6.6.24 – < 6.6.30
- affected 6.8.3 – < 6.8.9
References
References10
- https://git.kernel.org/stable/c/d34a516f2635090d36a306f84573e8de3d7374ce (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/66297b2ceda841f809637731d287bda3a93b49d8 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/93ba36238db6a74a82feb3dc476e25ea424ad630 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/9b7c5004d7c5ae062134052a85290869a015814c (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/15aa09d6d84629eb5296de30ac0aa19a33512f16 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/ebfe41889b762f1933c6762f6624b9724a25bee0 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/5af385f5f4cddf908f663974847a4083b2ff2c79 (opens in a new tab)x_transferred
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html (opens in a new tab)x_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html (opens in a new tab)
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-35701 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-35983)Record last updated .