CVE-2024-26843: debian debian_linux Out-of-bounds Write
CVSS: 6.0v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2024-26843DEBIAN-CVE-2024-26843
Published 17-04-2024Last modified 11-05-2026
Vulnerability summary
CVE-2024-26843 is a medium (CVSS 6.0) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.9% of scored vulnerabilities.
CVSS score
6.0/10
010
Medium · v3.1 (CVE.org)EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 19 · Related 13Timeline
- 17-04-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size md_size will have been narrowed if we have >= 4GB worth of pages in a soft-reserved region.
CVSS metrics
4 scores · 4 sources · 1 versionMedium 6.0Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated6.0MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.0MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
- NVDNIST6.0MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
0.23%
Chance of exploitation in the next 30 days
Percentile
13%
Versus all other CVEs
30-day change
0.00 pp
From 0.23% on 18-09-2026
18-09-202618-10-2026
EPSS score0.23%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu117 products
- linuxAll versions (No fix recorded) | < 5.15.0-112.122
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1063.69
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.82-1 | < 6.7.7-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ 16993c0f0a43213e23666ea40e9163887f593ac7, < 4fff3d735baea104017f2e3c245e27cdc79f2426 | ≥ 16993c0f0a43213e23666ea40e9163887f593ac7, < 4aa36b62c3eaa869860bf78b1146e9f2b5f782a9 | ≥ 16993c0f0a43213e23666ea40e9163887f593ac7, < 700c3f642c32721f246e09d3a9511acf40ae42be | ≥ 16993c0f0a43213e23666ea40e9163887f593ac7, < cf3d6813601fe496de7f023435e31bfffa74ae70 | ≥ 16993c0f0a43213e23666ea40e9163887f593ac7, < 156cb12ffdcf33883304f0db645e1eadae712fe0 | ≥ 16993c0f0a43213e23666ea40e9163887f593ac7, < de1034b38a346ef6be25fe8792f5d1e0684d5ff4 | 5.5
- linux_kernel< 5.10.211 | ≥ 5.11, < 5.15.150 | ≥ 5.16, < 6.1.80 | ≥ 6.2, < 6.6.19 | ≥ 6.7, < 6.7.7 | 6.8:rc1 | 6.8:rc2 | 6.8:rc3
3 vendors · 121 products
