Buffer overflow in Linux

CVE-2024-26730

In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number of temperature configuration registers does not always match the total number of temperature registers. This can result in access errors reported if KASAN is enabled. BUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core

Vulnerability class: Buffer Overflow

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H.

EPSS exploit prediction

EPSS: 0.003 (14.8th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 15th percentile — 14.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2024-26730: held from 0.002 to 0.003.

EPSS over last 30 days · oldest: 0.002 · newest: 0.003 · change: +0.000

Affected products

  • Linux — versions b7f1f7b2523a6a4382f12fe953380b847b80e09d, 6.6, 0
  • Linux Kernel — versions 6.6.19, 6.8

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2024-26730?
CVE-2024-26730 is a high-severity vulnerability in Linux, classified under Out-of-bounds Write. CVSS score: 7.3/10. Published 2024-04-03.
How severe is CVE-2024-26730?
High severity. CVSS v3 base score is 7.3 out of 10.