In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix out-of-bounds memory access Fix a bug that pdata->cpu_map[] is set before out-of-bounds check. The problem might be triggered on systems with more than 128 cores per package.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.5.1.rt7.346.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:3627 2024-06-05T00:00:00Z
kernel-0:4.18.0-553.5.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:3618 2024-06-05T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b cve-icon cve-icon
https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1 cve-icon cve-icon
https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3 cve-icon cve-icon
https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d cve-icon cve-icon
https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a cve-icon cve-icon
https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb cve-icon cve-icon
https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e cve-icon cve-icon
https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024040223-CVE-2024-26664-03db@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26664 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26664 cve-icon
History

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Wed, 13 Nov 2024 02:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9

Tue, 05 Nov 2024 10:45:00 +0000

Type Values Removed Values Added
References

Tue, 05 Nov 2024 10:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-02T06:22:13.341Z

Updated: 2024-11-05T09:13:28.208Z

Reserved: 2024-02-19T14:20:24.148Z

Link: CVE-2024-26664

cve-icon Vulnrichment

Updated: 2024-08-02T00:14:12.458Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-04-02T07:15:43.360

Modified: 2024-11-21T09:02:47.807

Link: CVE-2024-26664

cve-icon Redhat

Severity : Low

Publid Date: 2024-04-02T00:00:00Z

Links: CVE-2024-26664 - Bugzilla