Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H N H 7.1 .0034 27.3 —
AFFECTED Product Versions Fixed Linux 966d5c2c22edcc0ab3d519af39f91a29329c979a – — Linux 6.3 – 6.6.27
TIMELINE May 17 Reserved by Linux May 19 Published (CNA: Linux) Aug 4 RESCORED — CVE-2024-35937 (Linux). CVSS 8.1 → 7.1 (NVD).
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more careful and check if the subframe header can even be present.
| Date | Event | Detail |
|---|---|---|
| May 17, 2024 | Reserved | Reserved by Linux |
| May 19, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-35937 (Linux). CVSS 8.1 → 7.1 (NVD). |
Authoritative record: CVE-2024-35937 at cve.org
Vendors: linux
Weaknesses: CWE-125
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-35937 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.