PT-2024-7716 · Linux+3 · Linux Kernel+3

Yosry Ahmed · Published 2024-02-19 · Updated 2026-03-27 · CVE-2024-26832

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a race condition in the zswap writeback entry() function, which can lead to a folio being stranded indefinitely. This occurs because read swap cache async() returns a folio locked when it is newly allocated, and the folio is ref'd. The bug was discovered by code inspection and is unlikely to crash the system, but rather cause the folio to become stranded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-459

CWE-362

Related Identifiers

BDU:2024-09179

CVE-2024-26832

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

SUSE-SU-2026:0473-1

SUSE-SU-2026:0474-1

SUSE-SU-2026:0475-1

SUSE-SU-2026:0495-1

SUSE-SU-2026:0496-1

SUSE-SU-2026:0617-1

SUSE-SU-2026:1131-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 3004

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26832.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26832 · Vendor Advisory
• https://git.kernel.org/stable/c/14f1992430ef9e647b02aa8ca12c5bcb9a1dffea · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-26832 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26832 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26832 · Security Note
• https://bdu.fstec.ru/vul/2024-09179 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0496-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2973-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6156277d1b26cb3fdb6fcbf0686ab78268571644 · Patch
• https://cve.org/CVERecord?id=CVE-2024-26832 · Security Note
• https://git.kernel.org/stable/c/e2891c763aa2cff74dd6b5e978411ccf0cf94abe · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2203-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26832 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-26832 · Vendor Advisory