PT-2024-21485 · Linux+5 · Linux Kernel+5

Published 2024-04-03 · Updated 2026-05-26 · CVE-2024-26714

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the interconnect component in the Linux kernel, specifically the sc8180x driver. The CO0 BCM needs to be kept alive at all times to prevent hardware like the UFS controller from losing its connection to the rest of the SoC, resulting in a platform hang and logspam.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-13309

CVE-2024-26714

DSA-5658-1

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

USN-6895-1

USN-6895-2

USN-6895-3

USN-6895-4

USN-6900-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2025

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26714.json · Exploit
• https://git.kernel.org/stable/c/6616d3c4f8284a7b3ef978c916566bd240cea1c7 · Patch
• https://ubuntu.com/security/CVE-2024-26642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26603 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52645 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26898 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6895-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26825 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26726 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26688 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6900-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26665 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26663 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26593 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26666 · Vendor Advisory