5.5

CVE-2024-26849: netlink: add nla be16/32 types to minlen array

Modified
AliasesUBUNTU-CVE-2024-26849DEBIAN-CVE-2024-26849
Published 17-04-2024Last modified 11-05-2026

Vulnerability summary

CVE-2024-26849 is a medium (CVSS 5.5) Use of Uninitialized Resource vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.9% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 5
SUSE-SU-2024:3194-1SUSE-SU-2024:3195-1SUSE-SU-2024:3383-1SUSE-SU-2025:20044-1SUSE-SU-2025:20047-1

Timeline

  1. 17-04-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: netlink: add nla be16/32 types to minlen array BUG: KMSAN: uninit-value in nla_validate_range_unsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nla_validate_int_range lib/nlattr.c:336 [inline] BUG: KMSAN: uninit-value in validate_nla lib/nlattr.c:575 [inline] BUG: KMSAN: uninit-value in __nla_validate_parse+0x2e20/0x45c0 lib/nlattr.c:631 nla_validate_range_unsigned lib/nlattr.c:222 [inline] nla_validate_int_range lib/nlattr.c:336 [inline] validate_nla lib/nlattr.c:575 [inline] ... The message in question matches this policy: [NFTA_TARGET_REV] = NLA_POLICY_MAX(NLA_BE32, 255), but because NLA_BE32 size in minlen array is 0, the validation code will read past the malformed (too small) attribute. Note: Other attributes, e.g. BITFIELD32, SINT, UINT.. are also missing: those likely should be added too.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.22% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu76 products
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
  • linux-aws-5.13All versions (No fix recorded)
  • linux-aws-5.19All versions (No fix recorded)
Linux2 products
  • linux≥ 24ea1c8abaae6541ad95912422a9af4fb858428d, < 000a68159c0326b46c42ec712ab98793e7e625a7 | ≥ cbfac0add2afe8960a09806012313765a2179423, < 80b40f9cb87f3bf5877dfb852765cf92bc03ca77 | ≥ ecaf75ffd5f5db320d8b1da0198eef5a5ce64a3f, < 0ac219c4c3ab253f3981f346903458d20bacab32 | ≥ ecaf75ffd5f5db320d8b1da0198eef5a5ce64a3f, < a2ab028151841cd833cb53eb99427e0cc990112d | ≥ ecaf75ffd5f5db320d8b1da0198eef5a5ce64a3f, < 7a9d14c63b35f89563c5ecbadf918ad64979712d | ≥ ecaf75ffd5f5db320d8b1da0198eef5a5ce64a3f, < 9a0d18853c280f6a0ee99f91619f2442a17a323a | 6.1
  • linux_kernel≥ 6.1, < 6.1.81 | ≥ 6.2, < 6.6.21 | ≥ 6.7, < 6.7.9 | 6.8:rc1 | 6.8:rc2 | 6.8:rc3 | 6.8:rc4 | 6.8:rc5 | 6.8:rc6
Debian1 product
  • linux< 6.1.82-1 | < 6.7.9-1

3 vendors · 79 products

References

10 links