In the Linux kernel, the following vulnerability has been resolved:

hwmon: (coretemp) Fix out-of-bounds memory access

Fix a bug that pdata->cpu_map[] is set before out-of-bounds check.
The problem might be triggered on systems with more than 128 cores per
package.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00009.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
4f9dcadc55c21b39b072bb0882362c7edc4340bc affected
< 93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a
c00cdfc9bd767ee743ad3a4054de17aeb0afcbca affected
< 1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b
d9f0159da05df869071164edf0c6d7302efc5eca affected
< f0da068c75c20ffc5ba28243ff577531dc2af1fd
30cf0dee372baf9b515f2d9c7218f905fddf3cdb affected
< a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e
7108b80a542b9d65e44b36d64a700a83658c0b73 affected
< 9bce69419271eb8b2b3ab467387cb59c99d80deb
7108b80a542b9d65e44b36d64a700a83658c0b73 affected
< 853a6503c586a71abf27e60a7f8c4fb28092976d
7108b80a542b9d65e44b36d64a700a83658c0b73 affected
< 3a7753bda55985dc26fae17795cb10d825453ad1
7108b80a542b9d65e44b36d64a700a83658c0b73 affected
< 4e440abc894585a34c2904a32cd54af1742311b3
d1de8e1ae924d9dc31548676e4a665b52ebee27e affected
—
Linux Linux affected
Version Status Constraints
6.1 affected
—
0 unaffected
< 6.1
4.19.307 unaffected
≤ 4.19.*
5.4.269 unaffected
≤ 5.4.*
5.10.210 unaffected
≤ 5.10.*
5.15.149 unaffected
≤ 5.15.*
6.1.78 unaffected
≤ 6.1.*
6.6.17 unaffected
≤ 6.6.*
6.7.5 unaffected
≤ 6.7.*
6.8 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.5.1.rt7.346.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:3627 2024-06-05T00:00:00Z
kernel-0:4.18.0-553.5.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:3618 2024-06-05T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.22.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHBA-2024:3983 2024-06-19T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-427.22.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHBA-2024:3983 2024-06-19T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Debian Subscribe
Debian Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-3840-1 linux security update
Debian DLA Debian DLA DLA-3842-1 linux-5.10 security update
Debian DSA Debian DSA DSA-5658-1 linux security update
Debian DSA Debian DSA DSA-5681-1 linux security update
Ubuntu USN Ubuntu USN USN-6766-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6766-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6766-3 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6767-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6767-2 Linux kernel (BlueField) vulnerabilities
Ubuntu USN Ubuntu USN USN-6795-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-6828-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-6895-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6895-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6895-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6895-4 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6900-1 Linux kernel vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b cve-icon cve-icon
https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 cve-icon cve-icon
https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 cve-icon cve-icon
https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d cve-icon cve-icon
https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a cve-icon cve-icon
https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb cve-icon cve-icon
https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e cve-icon cve-icon
https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024040223-CVE-2024-26664-03db@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26664 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26664 cve-icon
History

Mon, 17 Mar 2025 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
Linux
Linux linux Kernel
Weaknesses CWE-787
CPEs cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 6.0, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Wed, 13 Nov 2024 02:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9

Tue, 05 Nov 2024 10:45:00 +0000

Type Values Removed Values Added
References

Tue, 05 Nov 2024 10:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T12:54:21.694Z

Reserved: 2024-02-19T14:20:24.148Z

Link: CVE-2024-26664

cve-icon Vulnrichment

Updated: 2024-08-02T00:14:12.458Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-02T07:15:43.360

Modified: 2025-03-17T15:13:10.637

Link: CVE-2024-26664

cve-icon Redhat

Severity : Low

Publid Date: 2024-04-02T00:00:00Z

Links: CVE-2024-26664 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses