CVE-2024-26950: debian debian_linux NULL Pointer Dereference

CVSS: 7.8v3.1HighModified

AliasesUBUNTU-CVE-2024-26950DEBIAN-CVE-2024-26950

Published 01-05-2024Last modified 15-10-2026

Vulnerability summary

CVE-2024-26950 is a high (CVSS 7.8) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.5% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

0.24%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

01-05-2024
PublishedVulnerability first disclosed.
15-10-2026
Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.

CVSS metrics

4 scores · 4 sources · 1 version

v3.17.8

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

15%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Ubuntu105 products

linux< 5.15.0-116.126 | < 6.8.0-35.35
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 5.15.0-1065.71 | < 6.8.0-1009.9
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1065.71~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-aws-fipsAll versions (No fix recorded) | < 5.15.0-1065.71+fips1
linux-azureAll versions (No fix recorded) | < 5.15.0-1068.77 | < 6.8.0-1008.8
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1068.77~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1068.77.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-azure-fipsAll versions (No fix recorded) | < 5.15.0-1068.77+fips1
linux-bluefield< 5.15.0-1047.49
linux-fipsAll versions (No fix recorded) | < 5.15.0-115.125+fips1
linux-gcpAll versions (No fix recorded) | < 5.15.0-1064.72 | < 6.8.0-1008.9
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1065.73~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-fipsAll versions (No fix recorded) | < 5.15.0-1064.72+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1062.68 | < 6.8.0-1004.7
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.15.0-1048.55
linux-gkeop-5.15< 5.15.0-1048.55~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-116.126~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.5All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.15.0-1058.61 | < 6.8.0-1006.6
linux-ibm-5.15< 5.15.0-1058.61~20.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1058.60
linux-intel-iotg< 5.15.0-1060.66
linux-intel-iotg-5.15< 5.15.0-1060.66~20.04.1
linux-kvm< 5.15.0-1062.67
linux-lowlatency< 5.15.0-116.126 | < 6.8.0-35.35.1
linux-lowlatency-hwe-5.15< 5.15.0-116.126~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.5All versions (No fix recorded)
linux-nvidia< 5.15.0-1060.61
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5All versions (No fix recorded)
linux-nvidia-tegra< 5.15.0-1026.26
linux-nvidia-tegra-5.15< 5.15.0-1027.27~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1015.15
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1All versions (No fix recorded)
linux-oem-6.5All versions (No fix recorded)
linux-oem-6.8< 6.8.0-1006.6
linux-oracle< 5.15.0-1063.69 | < 6.8.0-1006.6
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1063.69~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-raspi< 5.15.0-1058.61 | < 6.8.0-1005.5
linux-raspi-realtime< 6.8.0-2004.4
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1066.74 | < 6.8.1-1002.2
linux-riscvAll versions (No fix recorded) | < 6.8.0-35.35.1
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1061.65~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.5All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5All versions (No fix recorded)
linux-xilinx-zynqmp< 5.15.0-1035.39

Show all 105

Debian2 products

linux< 6.1.85-1 | < 6.7.12-1
debian_linuxEOL10.0

Linux2 products

linux≥ e7096c131e5161fa3b8e52a650d7719d2857adfd, < 493aa6bdcffd90a4f82aa614fe4f4db0641b4068 | ≥ e7096c131e5161fa3b8e52a650d7719d2857adfd, < 4be453271a882c8ebc28df3dbf9e4d95e6ac42f5 | ≥ e7096c131e5161fa3b8e52a650d7719d2857adfd, < 09c3fa70f65175861ca948cb2f0f791e666c90e5 | ≥ e7096c131e5161fa3b8e52a650d7719d2857adfd, < c991567e6c638079304cc15dff28748e4a3c4a37 | ≥ e7096c131e5161fa3b8e52a650d7719d2857adfd, < 93bcc1752c69bb309f4d8cfaf960ef1faeb34996 | ≥ e7096c131e5161fa3b8e52a650d7719d2857adfd, < d44bd323d8bb8031eef4bdc44547925998a11e47 | ≥ e7096c131e5161fa3b8e52a650d7719d2857adfd, < 71cbd32e3db82ea4a74e3ef9aeeaa6971969c86f | 5.6
linux_kernel≥ 5.6, < 5.10.215 | ≥ 5.11, < 5.15.154 | ≥ 5.16, < 6.1.84 | ≥ 6.2, < 6.6.24 | ≥ 6.7, < 6.7.12 | ≥ 6.8, < 6.8.3

3 vendors · 109 products