CVE-2024-26994

CVE-2024-26994

High · published May 1, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

speakup: Avoid crash on very long word

In case a console is set up really large and contains a really long word

(> 256 characters), we have to stop before the length of the word buffer.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.0th percentile
Published
2024-05-01T10:15Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.37, < 4.19.3134.19.313
linux/linux_kernel≥ 4.20, < 5.4.2755.4.275
linux/linux_kernel≥ 5.5, < 5.10.2165.10.216
linux/linux_kernel≥ 5.11, < 5.15.1575.15.157
linux/linux_kernel≥ 5.16, < 6.1.886.1.88
linux/linux_kernel≥ 6.2, < 6.6.296.6.29
linux/linux_kernel≥ 6.7, < 6.8.86.8.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
References (21)
https://git.kernel.org/stable/c/0d130158db29f5e0b3893154908cf618896450a8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0efb15c14c493263cb3a5f65f5ddfd4603d19a76 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6401038acfa24cba9c28cce410b7505efadd0222 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/756c5cb7c09e537b87b5d3acafcb101b2ccf394f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/89af25bd4b4bf6a71295f07e07a8ae7dc03c6595 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8defb1d22ba0395b81feb963b96e252b097ba76f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8f6b62125befe1675446923e4171eac2c012959c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0d130158db29f5e0b3893154908cf618896450a8 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/0efb15c14c493263cb3a5f65f5ddfd4603d19a76 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/6401038acfa24cba9c28cce410b7505efadd0222 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/756c5cb7c09e537b87b5d3acafcb101b2ccf394f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/89af25bd4b4bf6a71295f07e07a8ae7dc03c6595 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8defb1d22ba0395b81feb963b96e252b097ba76f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8f6b62125befe1675446923e4171eac2c012959c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 01 MAY 05:28Z
    speakup: Avoid crash on very long word
    cvelistv5