CVE-2024-26664CWE-787

CVE-2024-26664

High · published April 2, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (coretemp) Fix out-of-bounds memory access

Fix a bug that pdata->cpu_map[] is set before out-of-bounds check.

The problem might be triggered on systems with more than 128 cores per

package.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-04-02T11:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19.264, < 4.19.3074.19.307
linux/linux_kernel≥ 5.4.221, < 5.4.2695.4.269
linux/linux_kernel≥ 5.10.152, < 5.10.2105.10.210
linux/linux_kernel≥ 6.1, < 6.1.786.1.78
linux/linux_kernel≥ 6.2, < 6.6.176.6.17
linux/linux_kernel≥ 6.7, < 6.7.56.7.5
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (18)
https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 02 APR 06:22Z
    hwmon: (coretemp) Fix out-of-bounds memory access
    cvelistv5