CVE-2024-26754: debian debian_linux Use After Free

CVSS: 7.8v3.1HighAnalyzed

AliasesUBUNTU-CVE-2024-26754DEBIAN-CVE-2024-26754

Published 03-04-2024Last modified 11-05-2026

Vulnerability summary

CVE-2024-26754 is a high (CVSS 7.8) Use After Free vulnerability in debian debian_linux. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.6% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (NVD)

EPSS score

0.25%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 23 · Related 20

Timeline

03-04-2024
PublishedVulnerability first disclosed.
11-05-2026
Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() The gtp_net_ops pernet operations structure for the subsystem must be registered before registering the generic netlink family. Syzkaller hit 'general protection fault in gtp_genl_dump_pdp' bug: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] CPU: 1 PID: 5826 Comm: gtp Not tainted 6.8.0-rc3-std-def-alt1 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-alt1 04/01/2014 RIP: 0010:gtp_genl_dump_pdp+0x1be/0x800 [gtp] Code: c6 89 c6 e8 64 e9 86 df 58 45 85 f6 0f 85 4e 04 00 00 e8 c5 ee 86 df 48 8b 54 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 de 05 00 00 48 8b 44 24 18 4c 8b 30 4c 39 f0 74 RSP: 0018:ffff888014107220 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88800fcda588 R14: 0000000000000001 R15: 0000000000000000 FS: 00007f1be4eb05c0(0000) GS:ffff88806ce80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1be4e766cf CR3: 000000000c33e000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? show_regs+0x90/0xa0 ? die_addr+0x50/0xd0 ? exc_general_protection+0x148/0x220 ? asm_exc_general_protection+0x22/0x30 ? gtp_genl_dump_pdp+0x1be/0x800 [gtp] ? __alloc_skb+0x1dd/0x350 ? __pfx___alloc_skb+0x10/0x10 genl_dumpit+0x11d/0x230 netlink_dump+0x5b9/0xce0 ? lockdep_hardirqs_on_prepare+0x253/0x430 ? __pfx_netlink_dump+0x10/0x10 ? kasan_save_track+0x10/0x40 ? __kasan_kmalloc+0x9b/0xa0 ? genl_start+0x675/0x970 __netlink_dump_start+0x6fc/0x9f0 genl_family_rcv_msg_dumpit+0x1bb/0x2d0 ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 ? genl_op_from_small+0x2a/0x440 ? cap_capable+0x1d0/0x240 ? __pfx_genl_start+0x10/0x10 ? __pfx_genl_dumpit+0x10/0x10 ? __pfx_genl_done+0x10/0x10 ? security_capable+0x9d/0xe0

CVSS metrics

3 scores · 3 sources · 1 version

v3.17.8

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

0.00 pp

From 0.25% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu115 products

linux< 4.15.0-230.242 | < 5.4.0-186.206 | < 5.15.0-112.122
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 4.15.0-1174.187 | < 5.4.0-1126.136 | < 5.15.0-1063.69
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1063.69~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1126.136~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-aws-fips< 4.15.0-2112.118 | All versions (No fix recorded) | < 5.4.0-1126.136+fips2 | < 5.15.0-1063.69+fips1
linux-aws-hwe< 4.15.0-1174.187~16.04.1
linux-azure< 4.15.0-1182.197~14.04.1 | < 4.15.0-1182.197~16.04.1 | All versions (No fix recorded) | < 5.4.0-1131.138 | < 5.15.0-1066.75
linux-azure-4.15< 4.15.0-1182.197
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1065.74~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1131.138~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1067.76.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-azure-fips< 4.15.0-2091.97 | All versions (No fix recorded) | < 5.4.0-1131.138+fips1 | < 5.15.0-1065.74+fips1
linux-bluefield< 5.4.0-1086.93 | < 5.15.0-1044.46
linux-fips< 4.15.0-1128.139 | All versions (No fix recorded) | < 5.4.0-1100.110 | < 5.15.0-111.121+fips1
linux-gcp< 4.15.0-1167.184~16.04.2 | All versions (No fix recorded) | < 5.4.0-1130.139 | < 5.15.0-1062.70
linux-gcp-4.15< 4.15.0-1167.184
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1062.70~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1130.139~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-fips< 4.15.0-2075.80 | All versions (No fix recorded) | < 5.4.0-1130.139+fips1 | < 5.15.0-1062.70+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1060.66
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.4.0-1093.97 | < 5.15.0-1046.53
linux-gkeop-5.15< 5.15.0-1046.53~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hwe< 4.15.0-230.242~16.04.1 | All versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-113.123~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.4< 5.4.0-186.206~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.5All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1073.78 | < 5.15.0-1056.59
linux-ibm-5.15< 5.15.0-1057.60~20.04.1
linux-ibm-5.4< 5.4.0-1073.78~18.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1056.58
linux-intel-iotg< 5.15.0-1058.64
linux-intel-iotg-5.15< 5.15.0-1058.64~20.04.1
linux-iot< 5.4.0-1038.39
linux-kvm< 4.15.0-1157.162 | < 5.4.0-1114.121 | < 5.15.0-1060.65
linux-lowlatency< 5.15.0-110.120
linux-lowlatency-hwe-5.15< 5.15.0-110.120~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.5All versions (No fix recorded)
linux-nvidia< 5.15.0-1058.59
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5All versions (No fix recorded)
linux-nvidia-tegra< 5.15.0-1026.26
linux-nvidia-tegra-5.15< 5.15.0-1027.27~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1015.15
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1All versions (No fix recorded)
linux-oem-6.5All versions (No fix recorded)
linux-oracle< 4.15.0-1136.147~16.04.1 | < 4.15.0-1136.147 | < 5.4.0-1125.134 | < 5.15.0-1061.67
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1061.67~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1125.134~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-raspi< 5.4.0-1110.122 | < 5.15.0-1058.61
linux-raspi-5.4< 5.4.0-1110.122~18.04.1
linux-raspi-realtime< 6.8.0-2002.2
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1064.72
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1059.63~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.5All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5All versions (No fix recorded)
linux-xilinx-zynqmp< 5.4.0-1045.49 | < 5.15.0-1030.34

Show all 115

Debian2 products

linux< 6.1.82-1 | < 6.7.7-1
debian_linuxEOL10.0

Linux2 products

linux≥ 459aa660eb1d8ce67080da1983bb81d716aa5a69, < f0ecdfa679189d26aedfe24212d4e69e42c2c861 | ≥ 459aa660eb1d8ce67080da1983bb81d716aa5a69, < f8cbd1791900b5d96466eede8e9439a5b9ca4de7 | ≥ 459aa660eb1d8ce67080da1983bb81d716aa5a69, < 2e534fd15e5c2ca15821c897352cf0e8a3e30dca | ≥ 459aa660eb1d8ce67080da1983bb81d716aa5a69, < a576308800be28f2eaa099e7caad093b97d66e77 | ≥ 459aa660eb1d8ce67080da1983bb81d716aa5a69, < 3963f16cc7643b461271989b712329520374ad2a | ≥ 459aa660eb1d8ce67080da1983bb81d716aa5a69, < ba6b8b02a3314e62571a540efa96560888c5f03e | ≥ 459aa660eb1d8ce67080da1983bb81d716aa5a69, < 5013bd54d283eda5262c9ae3bcc966d01daf8576 | ≥ 459aa660eb1d8ce67080da1983bb81d716aa5a69, < 136cfaca22567a03bbb3bf53a43d8cb5748b80ec | 4.7
linux_kernel6.8:rc5 | ≥ 4.7, < 4.19.308 | ≥ 4.20, < 5.4.270 | ≥ 5.5, < 5.10.211 | ≥ 5.11, < 5.15.150 | ≥ 5.16, < 6.1.80 | ≥ 6.2, < 6.6.19 | ≥ 6.7, < 6.7.7 | 6.8:rc1 | 6.8:rc2 | 6.8:rc3 | 6.8:rc4

3 vendors · 119 products

References

28 links

git.kernel.org/stable/c/f0ecdfa679189d26aedfe24212d4e69e42c2c861REPORTPatch
git.kernel.org/stable/c/f8cbd1791900b5d96466eede8e9439a5b9ca4de7REPORTPatch
git.kernel.org/stable/c/2e534fd15e5c2ca15821c897352cf0e8a3e30dcaREPORTPatch
git.kernel.org/stable/c/a576308800be28f2eaa099e7caad093b97d66e77REPORTPatch
git.kernel.org/stable/c/3963f16cc7643b461271989b712329520374ad2aREPORTPatch
git.kernel.org/stable/c/ba6b8b02a3314e62571a540efa96560888c5f03eREPORTPatch
git.kernel.org/stable/c/5013bd54d283eda5262c9ae3bcc966d01daf8576REPORTPatch
git.kernel.org/stable/c/136cfaca22567a03bbb3bf53a43d8cb5748b80ecREPORTPatch
lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlX TransferredMailing List
lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlX TransferredMailing List

Show all 28 references

ubuntu.com/security/CVE-2024-26754REPORT
git.kernel.org/linus/136cfaca22567a03bbb3bf53a43d8cb5748b80ecREPORT
www.cve.org/CVERecord?id=CVE-2024-26754REPORT
ubuntu.com/security/notices/USN-6820-1Advisory
ubuntu.com/security/notices/USN-6821-1Advisory
ubuntu.com/security/notices/USN-6821-2Advisory
ubuntu.com/security/notices/USN-6828-1Advisory
ubuntu.com/security/notices/USN-6820-2Advisory
ubuntu.com/security/notices/USN-6821-3Advisory
ubuntu.com/security/notices/USN-6831-1Advisory
ubuntu.com/security/notices/USN-6821-4Advisory
ubuntu.com/security/notices/USN-6867-1Advisory
ubuntu.com/security/notices/USN-6871-1Advisory
ubuntu.com/security/notices/USN-6892-1Advisory
ubuntu.com/security/notices/USN-6919-1Advisory
ubuntu.com/security/notices/USN-7069-1Advisory
ubuntu.com/security/notices/USN-7069-2Advisory
security-tracker.debian.org/tracker/CVE-2024-26754Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities