PT-2024-3405 · Linux+5 · Linux Kernel+5

Vasiliy Kovalev · Published 2024-02-20 · Updated 2025-09-29 · CVE-2024-26734

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the devlink init() function in the Linux kernel, which is associated with the reuse of previously freed memory. This could allow an attacker to cause a denial of service. The problem arises because the pernet operations structure for the subsystem must be registered before registering the generic netlink family. In case of unsuccessful registration, an unregister operation should be performed.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Memory Leak

Weakness Enumeration

CWE-416

CWE-401

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2024-03677

CVE-2024-26734

OESA-2024-1622

OESA-2024-1647

OESA-2024-1648

OESA-2024-1649

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2024:2802-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6895-1

USN-6895-2

USN-6895-3

USN-6895-4

USN-6900-1

Affected Products

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 2174

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26734.json · Exploit
• https://ubuntu.com/security/CVE-2023-52642 · Vendor Advisory
• https://git.kernel.org/stable/c/def689fc26b9a9622d2e2cb0c4933dd3b1c8071c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-26740 · Security Note
• https://ubuntu.com/security/CVE-2024-26602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52643 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1622 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26635 · Security Note
• https://ubuntu.com/security/CVE-2024-26830 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26718 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52655 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26814 · Security Note
• https://ubuntu.com/security/CVE-2024-26603 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52645 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26839 · Security Note