Buffer overflow in Linux
CVE-2024-26730
In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number of temperature configuration registers does not always match the total number of temperature registers. This can result in access errors reported if KASAN is enabled. BUG: KASAN: global-out-of-bounds in nct6775_probe+0x5654/0x6fe9 nct6775_core
Vulnerability class: Buffer Overflow
EPSS: 0.002 (16.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H.
Affected products
- Linux — versions b7f1f7b2523a6a4382f12fe953380b847b80e09d, 6.6, 0
- Linux Linux_kernel — versions 6.6.19, 6.8
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-26730?
- CVE-2024-26730 is a high-severity vulnerability in Linux, classified under Out-of-bounds Write. CVSS score: 7.3/10. Published 2024-04-03.
- How severe is CVE-2024-26730?
- High severity. CVSS v3 base score is 7.3 out of 10.