5.5

CVE-2024-26679: debian debian_linux Improper Locking

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-26679DEBIAN-CVE-2024-26679
Published 02-04-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-26679 is a medium (CVSS 5.5) Improper Locking vulnerability in debian debian_linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.4% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 32 · Related 28
DLA-3840-1DLA-3842-1DSA-5681-1RHSA-2024:9315SUSE-SU-2024:1644-1SUSE-SU-2024:2008-1

Timeline

  1. 02-04-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6_ADDRFORM socket option and trigger a KCSAN warning.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

7%

Versus all other CVEs

30-day change

0.00 pp

From 0.18% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu116 products
  • linux< 4.4.0-258.292 | < 4.15.0-228.240 | < 5.4.0-181.201 | < 5.15.0-106.116
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1135.141 | < 4.4.0-1173.188 | < 4.15.0-1172.185 | < 5.4.0-1124.134 | < 5.15.0-1061.67
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ f4713a3dfad045d46afcb9c2a7d0bba288920ed4, < caa064c3c2394d03e289ebd6b0be5102eb8a5b40 | ≥ f4713a3dfad045d46afcb9c2a7d0bba288920ed4, < 5993f121fbc01dc2d734f0ff2628009b258fb1dd | ≥ f4713a3dfad045d46afcb9c2a7d0bba288920ed4, < 88081ba415224cf413101def4343d660f56d082b | ≥ f4713a3dfad045d46afcb9c2a7d0bba288920ed4, < 3266e638ba5cc1165f5e6989eb8c0720f1cc4b41 | ≥ f4713a3dfad045d46afcb9c2a7d0bba288920ed4, < 54538752216bf89ee88d47ad07802063a498c299 | ≥ f4713a3dfad045d46afcb9c2a7d0bba288920ed4, < 4a5e31bdd3c1702b520506d9cf8c41085f75c7f2 | ≥ f4713a3dfad045d46afcb9c2a7d0bba288920ed4, < 307fa8a75ab7423fa5c73573ec3d192de5027830 | ≥ f4713a3dfad045d46afcb9c2a7d0bba288920ed4, < eef00a82c568944f113f2de738156ac591bbd5cd | 433337f9c00cac447d020922f59237273f5d92be | ≥ 3.17.7, < 3.18 | 3.18
  • linux_kernel≥ 3.18, < 4.19.307 | ≥ 4.20, < 5.4.269 | ≥ 5.5, < 5.10.210 | ≥ 5.11, < 5.15.149 | ≥ 5.16, < 6.1.78 | ≥ 6.2, < 6.6.17 | ≥ 6.7, < 6.7.5 | 6.8:rc1 | 6.8:rc2 | 6.8:rc3

3 vendors · 120 products

References

33 links
Show all 33 references