7.8

CVE-2024-26955: debian debian_linux

CVSS: 7.8v3.1HighAnalyzed
AliasesUBUNTU-CVE-2024-26955DEBIAN-CVE-2024-26955
Published 01-05-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-26955 is a high (CVSS 7.8) vulnerability in debian debian_linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.1% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
0.26%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 26 · Related 23
DLA-3840-1DLA-3842-1DSA-5681-1SUSE-SU-2024:1644-1SUSE-SU-2024:1659-1SUSE-SU-2024:1663-1

Timeline

  1. 01-05-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent kernel bug at submit_bh_wbc() Fix a bug where nilfs_get_block() returns a successful status when searching and inserting the specified block both fail inconsistently. If this inconsistent behavior is not due to a previously fixed bug, then an unexpected race is occurring, so return a temporary error -EAGAIN instead. This prevents callers such as __block_write_begin_int() from requesting a read into a buffer that is not mapped, which would cause the BUG_ON check for the BH_Mapped flag in submit_bh_wbc() to fail.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.26%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

0.00 pp

From 0.26% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu117 products
  • linuxAll versions (No fix recorded) | < 5.4.0-189.209 | < 5.15.0-116.126 | < 6.8.0-35.35
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1128.138 | < 5.15.0-1065.71 | < 6.8.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < 91e4c4595fae5e87069e44687ae879091783c183 | ≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < 32eaee72e96590a75445c8a6c7c1057673b47e07 | ≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < f0fe7ad5aff4f0fcf988913313c497de85f1e186 | ≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < ca581d237f3b8539c044205bb003de71d75d227c | ≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < 192e9f9078c96be30b31c4b44d6294b24520fce5 | ≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < 0c8aa4cfda4e4adb15d5b6536d155eca9c9cd44c | ≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < 48d443d200237782dc82e6b60663ec414ef02e39 | ≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < 76ffbe911e2798c7296968f5fd72f7bf67207a8d | ≥ 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, < 269cdf353b5bdd15f1a079671b0f889113865f20 | 2.6.30
  • linux_kernel≥ 2.6.30, < 4.19.312 | ≥ 4.20, < 5.4.274 | ≥ 5.5, < 5.10.215 | ≥ 5.11, < 5.15.154 | ≥ 5.16, < 6.1.84 | ≥ 6.2, < 6.6.24 | ≥ 6.7, < 6.7.12 | ≥ 6.8, < 6.8.3

3 vendors · 121 products

References

33 links
Show all 33 references