CVE-2024-26736: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2024-26736 is a high (CVSS 8.1) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 0.73% chance of exploitation in the next 30 days, higher than 53.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 26 · Related 24Timeline
- 03-04-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volume->vid value is 20 characters. So increase idbuf[] size up to 24 to avoid overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE. [DH: Actually, it's 20 + NUL, so increase it to 24 and use snprintf()]
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.73%
Chance of exploitation in the next 30 days
Percentile
53%
Versus all other CVEs
30-day change
+0.01 pp
From 0.72% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu115 products
- linux< 4.15.0-226.238 | < 5.4.0-186.206 | < 5.15.0-112.122
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.15.0-1169.182 | < 5.4.0-1126.136 | < 5.15.0-1063.69
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.82-1 | < 6.7.7-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ d2ddc776a4581d900fc3bdc7803b403daae64d88, < 5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5 | ≥ d2ddc776a4581d900fc3bdc7803b403daae64d88, < d9b5e2b7a8196850383c70d099bfd39e81ab6637 | ≥ d2ddc776a4581d900fc3bdc7803b403daae64d88, < e56662160fc24d28cb75ac095cc6415ae1bda43e | ≥ d2ddc776a4581d900fc3bdc7803b403daae64d88, < e8530b170e464017203e3b8c6c49af6e916aece1 | ≥ d2ddc776a4581d900fc3bdc7803b403daae64d88, < 6e6065dd25b661420fac19c34282b6c626fcd35e | ≥ d2ddc776a4581d900fc3bdc7803b403daae64d88, < d34a5e57632bb5ff825196ddd9a48ca403626dfa | ≥ d2ddc776a4581d900fc3bdc7803b403daae64d88, < 6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d | 4.15
- linux_kernel≥ 4.15, < 5.4.270 | ≥ 5.5, < 5.10.211 | ≥ 5.11, < 5.15.150 | ≥ 5.16, < 6.1.80 | ≥ 6.2, < 6.6.19 | ≥ 6.7, < 6.7.7 | 6.8:rc1 | 6.8:rc2 | 6.8:rc3 | 6.8:rc4 | 6.8:rc5
3 vendors · 119 products
