What is CVE-2024-26824?

CVE-2024-26824 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2024-04-17.

How severe is CVE-2024-26824?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux

CVE-2024-26824

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.

EPSS: 0.002 (15.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions b6d972f6898308fbe7e693bf8d44ebfdb1cd2dc4, 6.5, 0
Linux Linux_kernel — versions 6.8

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-26824?: CVE-2024-26824 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2024-04-17.
How severe is CVE-2024-26824?: High severity. CVSS v3 base score is 7.8 out of 10.