PT-2024-21574 · Linux+4 · Linux Kernel+4
Published
2024-04-17
·
Updated
2025-10-13
·
CVE-2024-26908
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions up to 6.7.10
Description
A critical null pointer dereference issue has been identified in the Linux Kernel. The issue is related to the
kasprintf function in xen/smp.c. It is recommended to audit systems using vulnerable versions and monitor for exploit attempts. Additionally, ensuring strong network segmentation is advised.Recommendations
For Linux Kernel versions up to 6.7.10, upgrade the kernel to a patched version to resolve the issue.
As a temporary workaround, consider restricting access to the
xen/smp.c module to minimize the risk of exploitation.
Ensure strong network segmentation to reduce the attack surface.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Centos
Linux Kernel
Red Hat
Rocky Linux