What is CVE-2024-26786?

CVE-2024-26786 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, classified as a NULL Pointer Dereference flaw (CWE-476), affecting Linux kernel versions from 6.6 onward and patched in 6.6.21, 6.7.9 and 6.8. CVE-2024-26786 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-26786?

CVE-2024-26786 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2024-26786?

Yes, CVE-2024-26786 has been patched. Fixed versions include 6.6.21, 6.7.9 and 6.8. If you are running Linux kernel 6.6 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-26786 actively exploited?

CVE-2024-26786 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is NULL Pointer Dereference (CWE-476)?

The product dereferences a pointer that it expects to be valid but is NULL, typically causing a crash. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/476.html

CVE-2024-26786

Medium

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix iopt_access_list_id overwrite bug Syzkaller reported the following WARN_ON: WARNING: CPU: 1 PID: 4738 at drivers/iommu/iommufd/io_pagetable.c:1360 Call Trace: iommufd_access_change_ioas+0x2fe/0x4e0 iommufd_access_destroy_object+0x50/0xb0 iommufd_object_remove+0x2a3/0x490 iommufd_object_destroy_user iommufd_access_destroy+0x71/0xb0 iommufd_test_staccess_release+0x89/0xd0 __fput+0x272/0xb50 __fput_sync+0x4b/0x60 __do_sys_close __se_sys_close __x64_sys_close+0x8b/0x110 do_syscall_x64 The mismatch between the access pointer in the list and the passed-in pointer is resulting from an overwrite of access->iopt_access_list_id, in iopt_add_access(). Called from iommufd_access_change_ioas() when xa_alloc() succeeds but iopt_calculate_iova_alignment() fails. Add a new_id in iopt_add_access() and only update iopt_access_list_id when returning successfully.

Package Linux Kernel

Published 2024-04-04

Last modified 2025-04-04

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-476

CVE-2024-26786 is a NULL Pointer Dereference vulnerability

What is NULL Pointer Dereference?

The product dereferences a pointer that it expects to be valid but is NULL, typically causing a crash. Learn more on MITRE CWE

Affected versions

Linux kernel versions 6.6 and later are affected. Fixed in 6.6.21, 6.7.9, 6.8 and their respective stable series.

Affected from

≥ 6.6

Fixed in

✓ 6.6.21 6.6.x ✓ 6.7.9 6.7.x ✓ 6.8

References

3 total

Kernel Git
https://git.kernel.org/stable/c/9526a46cc0c378d381560279bea9aa34c84298a0

Patch
Kernel Git
https://git.kernel.org/stable/c/aeb004c0cd6958e910123a1607634401009c9539

Patch
Kernel Git
https://git.kernel.org/stable/c/f1fb745ee0a6fe43f1d84ec369c7e6af2310fda9

Patch

Details

CVE ID CVE-2024-26786

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-04-04

Modified 2025-04-04

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-26786?

CVE-2024-26786 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as a NULL Pointer Dereference flaw (CWE-476) . It affects Linux kernel versions from 6.6 onward and has been patched in 6.6.21, 6.7.9 and 6.8. CVE-2024-26786 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-26786?

CVE-2024-26786 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2024-26786?

Yes. CVE-2024-26786 has been patched. Fixed versions include 6.6.21, 6.7.9 and 6.8. If you are running Linux kernel 6.6 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-26786 actively exploited?

No. CVE-2024-26786 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.