Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-26664 Details

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix out-of-bounds memory access Fix a bug that pdata->cpu_map[] is set before out-of-bounds check. The problem might be triggered on systems with more than 128 cores per package.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b	kernel.org	Patch
https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1	kernel.org	Patch
https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3	kernel.org	Patch
https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d	kernel.org	Patch
https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a	kernel.org	Patch
https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb	kernel.org	Patch
https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e	kernel.org	Patch
https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd	kernel.org	Patch
https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b	CVE	Patch
https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1	CVE	Patch
https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3	CVE	Patch
https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d	CVE	Patch
https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a	CVE	Patch
https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb	CVE	Patch
https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e	CVE	Patch
https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd	CVE	Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	CVE	Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	CVE	Mailing List

see all 18 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 4.19.264, < 4.19.307 >= 5.4.221, < 5.4.269 >= 5.10.152, < 5.10.210 >= 6.1, < 6.1.78 >= 6.2, < 6.6.17
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.8:rc1:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc2:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc3:::::: Remediation No remediation found in references.
debian debian linux	10.0
CPE cpe:2.3:o:debian:debian_linux:10.0:::::::* Remediation No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Mar 17, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Nov 5, 2024	CVE Modified	kernel.org
Jun 27, 2024	CVE Modified	kernel.org
Jun 25, 2024	CVE Modified	kernel.org
May 29, 2024	CVE Modified	kernel.org
May 14, 2024	CVE Modified	kernel.org
Apr 2, 2024	New CVE Received	kernel.org