Security readout for executives and security teams
Plain-English summary
A flaw in the Linux Broadcom ASP network driver can leave network-packet memory allocated when an interface is shut down. Repeated interface shutdowns, including power-management transitions, may consume memory and corrupt transmit-control data, potentially destabilizing an affected system. The supplied CVSS score is 7.8 (High).
Executive priority
Prioritize affected appliances and embedded systems that use Broadcom ASP networking and frequently enter power-saving states. Remediate through normal high-severity kernel maintenance, escalating systems showing memory exhaustion or network instability. Broad emergency action is not supported because exposure is driver-specific and no active exploitation evidence is supplied.
Technical view
The bcmasp driver flushes TX rings during interface shutdown but fails to reclaim flushed packets and free their DMA-mapped buffers. This causes a memory leak and can corrupt TX control blocks during interface shutdown for power management. Kernel stable commits are supplied as fixes, but the bundled version data is insufficiently structured to establish exact affected and fixed release ranges confidently.
Likely exposure
Exposure appears limited to Linux systems using the bcmasp Broadcom ASP Ethernet driver on an affected kernel. Systems not using this driver are unlikely to reach the vulnerable path. Risk increases where interfaces are repeatedly brought down or undergo power-management transitions. The source bundle's flattened version list is ambiguous, so package-level verification is required.
Exploitation context
The issue requires local, low-privileged access according to the supplied CVSS vector. The bundle provides no evidence of public exploitation or weaponization, and the CVE is not listed as KEV. Treat active exploitation as unconfirmed. Operational triggering through interface shutdown or power management is documented, but reliable security impact beyond the stated memory leak and control-block corruption is not demonstrated.
Researcher notes
The vulnerable lifecycle is TX-ring teardown: flushed packets retain DMA-mapped buffers because reclamation is omitted. The stated secondary effect is TX control-block corruption during power-management shutdown. Three stable-kernel commits are referenced. Exact vulnerable ranges cannot be reconstructed safely from the flattened version fields, and no CWE or exploit evidence is provided.
Mitigation direction
- Identify systems running Linux with the bcmasp driver in use.
- Apply a vendor-supported kernel containing the referenced stable fix.
- Confirm fixed package versions with the operating-system or appliance vendor.
- Limit unnecessary interface cycling until remediation where operationally feasible.
- Follow vendor guidance if immediate kernel replacement is unavailable.
Validation and detection
- Inventory kernel versions and determine whether the bcmasp driver is active.
- Compare deployed kernel packages with vendor advisories and referenced fix commits.
- Test legitimate interface shutdown and power-management transitions in a controlled environment.
- Check for abnormal memory growth or network instability during those tests.
- Confirm updated kernels reclaim flushed TX packets without regression.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-35858 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9LinuxVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/09040baf8779ad880e0e0d0ea10e57aa929ef3abCVE reference, Linux
- https://git.kernel.org/stable/c/2389ad1990163d29cba5480d693b4c2e31cc545cCVE reference, Linux
- https://git.kernel.org/stable/c/9f898fc2c31fbf0ac5ecd289f528a716464cb005CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.