CVE-2024-26664

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26664
In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix out-of-bounds memory access Fix a bug that pdata->cpu_map[] is set before out-of-bounds check. The problem might be triggered on systems with more than 128 cores per package.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b Patch
https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 Patch
https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 Patch
https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d Patch
https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a Patch
https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb Patch
https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e Patch
https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd Patch
https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b Patch
https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 Patch
https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 Patch
https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d Patch
https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a Patch
https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb Patch
https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e Patch
https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

17 Mar 2025, 15:13

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b - () https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b - Patch
References () https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 - () https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 - Patch
References () https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 - () https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 - Patch
References () https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d - () https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d - Patch
References () https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a - () https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a - Patch
References () https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb - () https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb - Patch
References () https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e - () https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e - Patch
References () https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd - () https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Mailing List
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Mailing List
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
First Time Debian
Linux linux Kernel
Linux
Debian debian Linux
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

21 Nov 2024, 09:02

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b - () https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b -
References () https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 - () https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 -
References () https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 - () https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 -
References () https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d - () https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d -
References () https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a - () https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a -
References () https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb - () https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb -
References () https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e - () https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e -
References () https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd - () https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd -

05 Nov 2024, 10:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

02 Apr 2024, 12:50

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: hwmon: (coretemp) Arreglar el acceso a memoria fuera de los límites Arreglar un error que pdata->cpu_map[] está configurado antes de la verificación de los límites. El problema podría surgir en sistemas con más de 128 núcleos por paquete.

02 Apr 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-02 07:15

Updated : 2025-03-17 15:13

NVD link : CVE-2024-26664

Mitre link : CVE-2024-26664

CVE.ORG link : CVE-2024-26664

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write