PT-2024-21571 · Linux+3 · Linux Kernel+3

Published 2024-02-28 · Updated 2026-03-13 · CVE-2024-26902

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc3+

Description The Linux kernel has a vulnerability that can cause a kernel panic when running the command 'perf record -e branches' on certain hardware, such as the Sophgo sg2042. This issue occurs due to a NULL pointer dereference in the pmu overflow handler. The problem arises when setting bits in the unsigned long overflowed ctrs using the expression (1 << idx) of type int, which is not desired. Instead, the BIT() function should be used.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, versions prior to 6.6.0-rc3+ are affected, so updating to 6.6.0-rc3+ or later will resolve the issue.

Note: The provided information does not specify the exact fixed version, but it implies that versions prior to 6.6.0-rc3+ are vulnerable. Therefore, updating to the latest available version of the Linux kernel is recommended to ensure the fix is included.

Exploit

Fix

NULL Pointer Dereference

Stack Overflow

Weakness Enumeration

CWE-476

CWE-121

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-14046

AZL-40076

AZL-40164

BDU:2025-02911

CVE-2024-26902

ECHO-B7A4-7F83-51E2

Affected Products

Alt Linux

Astra Linux

Debian

Linux Kernel

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26902.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26902 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26902 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-40164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26902 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-26902 · Vendor Advisory
• https://git.kernel.org/stable/c/3ede8e94de6b834b48b0643385e66363e7a04be9 · Patch
• https://git.kernel.org/stable/c/34b567868777e9fd39ec5333969728a7f0cf179c · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2024-26902 · Vendor Advisory
• https://git.kernel.org/stable/c/9f599ba3b9cc4bdb8ec1e3f0feddd41bf9d296d6 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26902 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-26902 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02911 · Security Note
• https://osv.dev/vulnerability/AZL-40076 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26902 · Security Note