5.5

CVE-2024-26776: debian debian_linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2024-26776DEBIAN-CVE-2024-26776
Published 03-04-2024Last modified 11-05-2026

Vulnerability summary

CVE-2024-26776 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.2% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 15 · Related 13

Timeline

  1. 03-04-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected Return IRQ_NONE from the interrupt handler when no interrupt was detected. Because an empty interrupt will cause a null pointer error: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Call trace: complete+0x54/0x100 hisi_sfc_v3xx_isr+0x2c/0x40 [spi_hisi_sfc_v3xx] __handle_irq_event_percpu+0x64/0x1e0 handle_irq_event+0x7c/0x1cc

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu117 products
  • linuxAll versions (No fix recorded) | < 5.15.0-112.122
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1063.69
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ a2ca53b52e007de81752bbb443d828f5950d6d04, < e94da8aca2e78ef9ecca02eb211869eacd5504e5 | ≥ a2ca53b52e007de81752bbb443d828f5950d6d04, < 0399d7eba41d9b28f5bdd7757ec21a5b7046858d | ≥ a2ca53b52e007de81752bbb443d828f5950d6d04, < f19361d570c67e7e014896fa2dacd7d721bf0aa8 | ≥ a2ca53b52e007de81752bbb443d828f5950d6d04, < d637b5118274701e8448f35953877daf04df18b4 | ≥ a2ca53b52e007de81752bbb443d828f5950d6d04, < e4168ac25b4bd378bd7dda322d589482a136c1fd | ≥ a2ca53b52e007de81752bbb443d828f5950d6d04, < de8b6e1c231a95abf95ad097b993d34b31458ec9 | 5.6
  • linux_kernel< 5.10.211 | ≥ 5.11, < 5.15.150 | ≥ 5.16, < 6.1.80 | ≥ 6.2, < 6.6.19 | ≥ 6.7, < 6.7.7 | 6.8:rc1

3 vendors · 121 products

References

21 links
Show all 21 references