Security readout for executives and security teams
Plain-English summary
This is a Linux kernel availability flaw in the ENA network driver. Under specific local conditions involving ENA transmit queues, XDP traffic handling, and a virtual function reset, the driver can free descriptors incorrectly and crash the system.
Executive priority
Treat as a moderate operational reliability risk. It is not described as remote code execution, but affected infrastructure could crash and disrupt services, so patch during the next prioritized kernel maintenance window.
Technical view
The issue is in ena_free_tx_bufs(), which assumes the TX queue contains normal network-stack SKBs. For XDP-specific TX queues, it can use the wrong cleanup path during VF reset, leaving descriptors improperly freed and causing crashes.
Likely exposure
Exposure is most likely on Linux systems using the ENA driver with affected kernel versions and XDP-related transmit paths. Cloud, virtualized, or appliance environments using ENA-backed networking should verify kernel vendor status.
Exploitation context
The CVSS vector requires local access with low privileges and impacts availability only. The source bundle does not show CISA KEV listing or other evidence of active exploitation.
Researcher notes
The key condition is descriptor cleanup for XDP-specific ENA TX queues during VF reset. The supplied evidence supports availability impact, not confidentiality or integrity impact, and does not include exploit details or confirmed exploitation.
Mitigation direction
- Update to a vendor kernel containing the referenced stable Linux fixes.
- Follow distribution or product vendor advisories for exact fixed package versions.
- Prioritize systems using ENA networking and XDP features.
- Apply Debian LTS or Siemens guidance where those environments apply.
- If no fix is available, monitor vendor guidance and reduce exposure to untrusted local users.
Validation and detection
- Inventory Linux kernel versions on ENA-backed systems.
- Confirm whether the ENA driver and XDP features are in use.
- Map installed kernels against vendor fixed versions or referenced stable commits.
- Review crash reports for ENA, VF reset, or TX queue cleanup failures.
- Track affected appliances against Siemens and distribution advisories.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-35958 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H1.83.6CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
5.5MediumVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/b26aa765f7437e1bbe8db4c1641b12bd5dd378f0CVE reference, Linux
- https://git.kernel.org/stable/c/fdfbf54d128ab6ab255db138488f9650485795a2CVE reference, Linux
- https://git.kernel.org/stable/c/19ff8fed3338898b70b2aad831386c78564912e1CVE reference, Linux
- https://git.kernel.org/stable/c/5c7f2240d9835a7823d87f7460d8eae9f4e504c7CVE reference, Linux
- https://git.kernel.org/stable/c/c31baa07f01307b7ae05f3ce32b89d8e2ba0cc1dCVE reference, Linux
- https://git.kernel.org/stable/c/bf02d9fe00632d22fa91d34749c7aacf397b6cdeCVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlCVE reference, CVE · x_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlCVE reference, siemens-SADP
- https://cert-portal.siemens.com/productcert/html/ssa-613116.htmlCVE reference, siemens-SADP
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.