5.5

CVE-2024-26889: debian debian_linux Classic Buffer Overflow

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-26889DEBIAN-CVE-2024-26889
Published 17-04-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-26889 is a medium (CVSS 5.5) Classic Buffer Overflow vulnerability in debian debian_linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 18.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.27%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 42 · Related 38
DLA-3840-1DLA-3842-1DSA-5681-1RHSA-2024:9315SUSE-SU-2024:2008-1SUSE-SU-2024:2019-1

Timeline

  1. 17-04-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.27%

Chance of exploitation in the next 30 days

Percentile

18%

Versus all other CVEs

30-day change

0.00 pp

From 0.27% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.27%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu111 products
  • linux< 5.4.0-189.209 | < 5.15.0-112.122 | < 6.8.0-35.35
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1128.138 | < 5.15.0-1063.69 | < 6.8.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 194ab82c1ea187512ff2f822124bd05b63fc9f76, < 6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac | ≥ b48595f5b1c6e81e06e164e7d2b7a30b1776161e, < 54a03e4ac1a41edf8a5087bd59f8241b0de96d3d | ≥ ffb060b136dd75a033ced0fc0aed2882c02e8b56, < d47e6c1932cee02954ea588c9f09fd5ecefeadfc | ≥ bbec1724519ecd9c468d1186a8f30b7567175bfb, < 2e845867b4e279eff0a19ade253390470e07e8a1 | ≥ dcda165706b9fbfd685898d46a6749d7d397e0c0, < a41c8efe659caed0e21422876bbb6b73c15b5244 | ≥ dcda165706b9fbfd685898d46a6749d7d397e0c0, < 8c28598a2c29201d2ba7fc37539a7d41c264fb10 | ≥ dcda165706b9fbfd685898d46a6749d7d397e0c0, < 2edce8e9a99dd5e4404259d52e754fdc97fb42c2 | ≥ dcda165706b9fbfd685898d46a6749d7d397e0c0, < 81137162bfaa7278785b24c1fd2e9e74f082e8e4 | d9ce7d438366431e5688be98d8680336ce0a0f8d | a55d53ad5c86aee3f6da50ee73626008997673fa | 5558f4312dca43cebfb9a1aab3d632be91bbb736 | ≥ 4.19.297, < 4.19.311 | ≥ 5.4.259, < 5.4.273 | ≥ 5.10.199, < 5.10.214 | ≥ 5.15.137, < 5.15.153 | ≥ 4.14.328, < 4.15 | ≥ 6.1.60, < 6.2 | ≥ 6.5.9, < 6.6 | 6.6
  • linux_kernel≥ 4.14.328, < 4.15 | ≥ 4.19.297, < 4.19.311 | ≥ 5.4.259, < 5.4.273 | ≥ 5.10.199, < 5.10.214 | ≥ 5.15.137, < 5.15.153 | ≥ 6.1.60, < 6.1.83 | ≥ 6.5.9, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2

3 vendors · 115 products

References

41 links
Show all 41 references