In the Linux kernel, the following vulnerability has been resolved:

wireguard: receive: annotate data-race around receiving_counter.counter

Syzkaller with KCSAN identified a data-race issue when accessing
keypair->receiving_counter.counter. Use READ_ONCE() and WRITE_ONCE()
annotations to mark the data race as intentional.

BUG: KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll

write to 0xffff888107765888 of 8 bytes by interrupt on cpu 0:
counter_validate drivers/net/wireguard/receive.c:321 [inline]
wg_packet_rx_poll+0x3ac/0xf00 drivers/net/wireguard/receive.c:461
__napi_poll+0x60/0x3b0 net/core/dev.c:6536
napi_poll net/core/dev.c:6605 [inline]
net_rx_action+0x32b/0x750 net/core/dev.c:6738
__do_softirq+0xc4/0x279 kernel/softirq.c:553
do_softirq+0x5e/0x90 kernel/softirq.c:454
__local_bh_enable_ip+0x64/0x70 kernel/softirq.c:381
__raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
_raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210
spin_unlock_bh include/linux/spinlock.h:396 [inline]
ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]
wg_packet_decrypt_worker+0x6c5/0x700 drivers/net/wireguard/receive.c:499
process_one_work kernel/workqueue.c:2633 [inline]
...

read to 0xffff888107765888 of 8 bytes by task 3196 on cpu 1:
decrypt_packet drivers/net/wireguard/receive.c:252 [inline]
wg_packet_decrypt_worker+0x220/0x700 drivers/net/wireguard/receive.c:501
process_one_work kernel/workqueue.c:2633 [inline]
process_scheduled_works+0x5b8/0xa30 kernel/workqueue.c:2706
worker_thread+0x525/0x730 kernel/workqueue.c:2787
...

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00011.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
a9e90d9931f3a474f04bab782ccd9d77904941e9 affected
< f87884e0dffd61b47e58bc6e1e2f6843c212b0cc
a9e90d9931f3a474f04bab782ccd9d77904941e9 affected
< d691be84ab898cf136a35176eaf2f8fc116563f0
a9e90d9931f3a474f04bab782ccd9d77904941e9 affected
< 45a83b220c83e3c326513269afbf69ae6fc65cce
a9e90d9931f3a474f04bab782ccd9d77904941e9 affected
< 78739d72f16b2d7d549f713f1dfebd678d32484b
a9e90d9931f3a474f04bab782ccd9d77904941e9 affected
< 3f94da807fe1668b9830f0eefbbf7e887b0a7bc6
a9e90d9931f3a474f04bab782ccd9d77904941e9 affected
< fdf16de078a97bf14bb8ee2b8d47cc3d3ead09ed
a9e90d9931f3a474f04bab782ccd9d77904941e9 affected
< bba045dc4d996d03dce6fe45726e78a1a1f6d4c3
4a7939808afdc57ecaeb72d049e2985321a1e44e affected
—
Linux Linux affected
Version Status Constraints
5.7 affected
—
0 unaffected
< 5.7
5.10.214 unaffected
≤ 5.10.*
5.15.153 unaffected
≤ 5.15.*
6.1.83 unaffected
≤ 6.1.*
6.6.23 unaffected
≤ 6.6.*
6.7.11 unaffected
≤ 6.7.*
6.8.2 unaffected
≤ 6.8.*
6.9 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z

No data.

Subscriptions

Vendors Products
Debian Subscribe
Debian Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-3842-1 linux-5.10 security update
Debian DSA Debian DSA DSA-5681-1 linux security update
Ubuntu USN Ubuntu USN USN-6816-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6817-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6817-2 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6817-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6820-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6820-2 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-6821-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6821-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6821-3 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6821-4 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-6828-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-6871-1 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-6878-1 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-6892-1 Linux kernel (IBM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6919-1 Linux kernel vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/3f94da807fe1668b9830f0eefbbf7e887b0a7bc6 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/45a83b220c83e3c326513269afbf69ae6fc65cce cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/78739d72f16b2d7d549f713f1dfebd678d32484b cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/bba045dc4d996d03dce6fe45726e78a1a1f6d4c3 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/d691be84ab898cf136a35176eaf2f8fc116563f0 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/f87884e0dffd61b47e58bc6e1e2f6843c212b0cc cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/fdf16de078a97bf14bb8ee2b8d47cc3d3ead09ed cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024041736-CVE-2024-26861-3a78@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26861 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26861 cve-icon
History

Wed, 02 Apr 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
Linux
Linux linux Kernel
CPEs cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Wed, 13 Nov 2024 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Thu, 12 Sep 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T12:55:00.752Z

Reserved: 2024-02-19T14:20:24.184Z

Link: CVE-2024-26861

cve-icon Vulnrichment

Updated: 2024-08-02T00:21:04.156Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-17T11:15:08.997

Modified: 2025-04-02T13:16:54.733

Link: CVE-2024-26861

cve-icon Redhat

Severity : Low

Publid Date: 2024-04-17T00:00:00Z

Links: CVE-2024-26861 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses