CVE-2024-26881: linux NULL Pointer Dereference

CVSS: 7.5v3.1HighModified

AliasesUBUNTU-CVE-2024-26881DEBIAN-CVE-2024-26881

Published 17-04-2024Last modified 05-08-2026

Vulnerability summary

CVE-2024-26881 is a high (CVSS 7.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.69% chance of exploitation in the next 30 days, higher than 52% of scored vulnerabilities.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

0.69%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

17-04-2024
PublishedVulnerability first disclosed.
05-08-2026
Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is received on HIP08 devices The HIP08 devices does not register the ptp devices, so the hdev->ptp is NULL, but the hardware can receive 1588 messages, and set the HNS3_RXD_TS_VLD_B bit, so, if match this case, the access of hdev->ptp->flags will cause a kernel crash: [ 5888.946472] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018 [ 5888.946475] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018 ... [ 5889.266118] pc : hclge_ptp_get_rx_hwts+0x40/0x170 [hclge] [ 5889.272612] lr : hclge_ptp_get_rx_hwts+0x34/0x170 [hclge] [ 5889.279101] sp : ffff800012c3bc50 [ 5889.283516] x29: ffff800012c3bc50 x28: ffff2040002be040 [ 5889.289927] x27: ffff800009116484 x26: 0000000080007500 [ 5889.296333] x25: 0000000000000000 x24: ffff204001c6f000 [ 5889.302738] x23: ffff204144f53c00 x22: 0000000000000000 [ 5889.309134] x21: 0000000000000000 x20: ffff204004220080 [ 5889.315520] x19: ffff204144f53c00 x18: 0000000000000000 [ 5889.321897] x17: 0000000000000000 x16: 0000000000000000 [ 5889.328263] x15: 0000004000140ec8 x14: 0000000000000000 [ 5889.334617] x13: 0000000000000000 x12: 00000000010011df [ 5889.340965] x11: bbfeff4d22000000 x10: 0000000000000000 [ 5889.347303] x9 : ffff800009402124 x8 : 0200f78811dfbb4d [ 5889.353637] x7 : 2200000000191b01 x6 : ffff208002a7d480 [ 5889.359959] x5 : 0000000000000000 x4 : 0000000000000000 [ 5889.366271] x3 : 0000000000000000 x2 : 0000000000000000 [ 5889.372567] x1 : 0000000000000000 x0 : ffff20400095c080 [ 5889.378857] Call trace: [ 5889.382285] hclge_ptp_get_rx_hwts+0x40/0x170 [hclge] [ 5889.388304] hns3_handle_bdinfo+0x324/0x410 [hns3] [ 5889.394055] hns3_handle_rx_bd+0x60/0x150 [hns3] [ 5889.399624] hns3_clean_rx_ring+0x84/0x170 [hns3] [ 5889.405270] hns3_nic_common_poll+0xa8/0x220 [hns3] [ 5889.411084] napi_poll+0xcc/0x264 [ 5889.415329] net_rx_action+0xd4/0x21c [ 5889.419911] __do_softirq+0x130/0x358 [ 5889.424484] irq_exit+0x134/0x154 [ 5889.428700] __handle_domain_irq+0x88/0xf0 [ 5889.433684] gic_handle_irq+0x78/0x2c0 [ 5889.438319] el1_irq+0xb8/0x140 [ 5889.442354] arch_cpu_idle+0x18/0x40 [ 5889.446816] default_idle_call+0x5c/0x1c0 [ 5889.451714] cpuidle_idle_call+0x174/0x1b0 [ 5889.456692] do_idle+0xc8/0x160 [ 5889.460717] cpu_startup_entry+0x30/0xfc [ 5889.465523] secondary_start_kernel+0x158/0x1ec [ 5889.470936] Code: 97ffab78 f9411c14 91408294 f9457284 (f9400c80) [ 5889.477950] SMP: stopping secondary CPUs [ 5890.514626] SMP: failed to stop secondary CPUs 0-69,71-95 [ 5890.522951] Starting crashdump kernel...

CVSS metrics

4 scores · 4 sources · 1 version

v3.17.5

EPSS trend

Probability

0.69%

Chance of exploitation in the next 30 days

Percentile

52%

Versus all other CVEs

30-day change

+0.01 pp

From 0.69% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.69%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Ubuntu105 products

linux< 5.15.0-112.122 | < 6.8.0-35.35
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 5.15.0-1063.69 | < 6.8.0-1009.9
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1063.69~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-aws-fipsAll versions (No fix recorded) | < 5.15.0-1063.69+fips1
linux-azureAll versions (No fix recorded) | < 5.15.0-1066.75 | < 6.8.0-1008.8
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1065.74~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1067.76.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-azure-fipsAll versions (No fix recorded) | < 5.15.0-1065.74+fips1
linux-bluefield< 5.15.0-1044.46
linux-fipsAll versions (No fix recorded) | < 5.15.0-111.121+fips1
linux-gcpAll versions (No fix recorded) | < 5.15.0-1062.70 | < 6.8.0-1008.9
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1062.70~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-fipsAll versions (No fix recorded) | < 5.15.0-1062.70+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1060.66 | < 6.8.0-1004.7
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.15.0-1046.53
linux-gkeop-5.15< 5.15.0-1046.53~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-113.123~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.5All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.15.0-1056.59 | < 6.8.0-1006.6
linux-ibm-5.15< 5.15.0-1057.60~20.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1056.58
linux-intel-iotg< 5.15.0-1058.64
linux-intel-iotg-5.15< 5.15.0-1058.64~20.04.1
linux-kvm< 5.15.0-1060.65
linux-lowlatency< 5.15.0-110.120 | < 6.8.0-35.35.1
linux-lowlatency-hwe-5.15< 5.15.0-110.120~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.5All versions (No fix recorded)
linux-nvidia< 5.15.0-1058.59
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5All versions (No fix recorded)
linux-nvidia-tegra< 5.15.0-1026.26
linux-nvidia-tegra-5.15< 5.15.0-1027.27~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1015.15
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1All versions (No fix recorded)
linux-oem-6.5All versions (No fix recorded)
linux-oem-6.8< 6.8.0-1006.6
linux-oracle< 5.15.0-1061.67 | < 6.8.0-1006.6
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1061.67~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-raspi< 5.15.0-1058.61 | < 6.8.0-1005.5
linux-raspi-realtime< 6.8.0-2004.4
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1064.72 | < 6.8.1-1002.2
linux-riscvAll versions (No fix recorded) | < 6.8.0-35.35.1
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1059.63~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.5All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5All versions (No fix recorded)
linux-xilinx-zynqmp< 5.15.0-1030.34

Show all 105

Linux2 products

linux≥ 0bf5eb788512187b744ef7f79de835e6cbe85b9c, < 23ec1cec24293f9799c725941677d4e167997265 | ≥ 0bf5eb788512187b744ef7f79de835e6cbe85b9c, < b3cf70472a600bcb2efe24906bc9bc6014d4c6f6 | ≥ 0bf5eb788512187b744ef7f79de835e6cbe85b9c, < f0b5225a7dfc1bf53c98215db8c2f0b4efd3f108 | ≥ 0bf5eb788512187b744ef7f79de835e6cbe85b9c, < b2bb19114c079dcfec1ea46e761f510e30505e70 | ≥ 0bf5eb788512187b744ef7f79de835e6cbe85b9c, < 11b998360d96f6c76f04a95f54b49f24d3c858e4 | ≥ 0bf5eb788512187b744ef7f79de835e6cbe85b9c, < 0fbcf2366ba9888cf02eda23e35fde7f7fcc07c3 | 5.14
linux_kernel≥ 5.14, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2

Debian1 product

linux< 6.1.85-1 | < 6.7.12-1

3 vendors · 108 products

References

26 links

git.kernel.org/stable/c/23ec1cec24293f9799c725941677d4e167997265REPORTPatch
git.kernel.org/stable/c/b3cf70472a600bcb2efe24906bc9bc6014d4c6f6REPORTPatch
git.kernel.org/stable/c/f0b5225a7dfc1bf53c98215db8c2f0b4efd3f108REPORTPatch
git.kernel.org/stable/c/b2bb19114c079dcfec1ea46e761f510e30505e70REPORTPatch
git.kernel.org/stable/c/11b998360d96f6c76f04a95f54b49f24d3c858e4REPORTPatch
git.kernel.org/stable/c/0fbcf2366ba9888cf02eda23e35fde7f7fcc07c3REPORTPatch
ubuntu.com/security/CVE-2024-26881REPORT
www.cve.org/CVERecord?id=CVE-2024-26881REPORT
git.kernel.org/linus/0fbcf2366ba9888cf02eda23e35fde7f7fcc07c3REPORT
ubuntu.com/security/notices/USN-6816-1Advisory

Show all 26 references

ubuntu.com/security/notices/USN-6817-1Advisory
ubuntu.com/security/notices/USN-6820-1Advisory
ubuntu.com/security/notices/USN-6821-1Advisory
ubuntu.com/security/notices/USN-6821-2Advisory
ubuntu.com/security/notices/USN-6817-2Advisory
ubuntu.com/security/notices/USN-6828-1Advisory
ubuntu.com/security/notices/USN-6820-2Advisory
ubuntu.com/security/notices/USN-6821-3Advisory
ubuntu.com/security/notices/USN-6817-3Advisory
ubuntu.com/security/notices/USN-6821-4Advisory
ubuntu.com/security/notices/USN-6871-1Advisory
ubuntu.com/security/notices/USN-6878-1Advisory
ubuntu.com/security/notices/USN-6892-1Advisory
ubuntu.com/security/notices/USN-6919-1Advisory
security-tracker.debian.org/tracker/CVE-2024-26881Advisory
nvd.nist.gov/vuln/detail/CVE-2024-26881OvalAdvisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities