CVE Feed

    Dashboard / CVE / CVE-2024-26679

    CVE-2024-26679

    In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6_ADDRFORM socket option and trigger a KCSAN warning.

    Published:Apr 2, 2024
    Last Modified:May 4, 2025
    EPS:Apr 2, 2024
    EPSS Score:0.0001
    CVSS Score:5.5

    Affected Products

    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-77118 (CVSS 8.4) — A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pc…
    CVE-2026-56968 (CVSS 3.7) — GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, w…
    CVE-2026-49975 (CVSS 7.5) — Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of …
    CVE-2026-9256 (CVSS 9.2) — NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerabilit…
    CVE-2026-31431 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating …
    CVE-2026-34757 (CVSS 5.1) — LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network …
    CVE-2026-4775 (CVSS 7.8) — A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerabili…
    CVE-2025-63261 (CVSS 7.8) — AWStats 8.0 is vulnerable to Command Injection via the open function…
    CVE-2026-3497 (CVSS 6.9) — Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects …
    CVE-2026-1940 (CVSS 5.1) — An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The p…

    References

    https://git.kernel.org/stable/c/307fa8a75ab7423fa5c73573ec3d192de5027830
    https://git.kernel.org/stable/c/3266e638ba5cc1165f5e6989eb8c0720f1cc4b41
    https://git.kernel.org/stable/c/4a5e31bdd3c1702b520506d9cf8c41085f75c7f2
    https://git.kernel.org/stable/c/54538752216bf89ee88d47ad07802063a498c299
    https://git.kernel.org/stable/c/5993f121fbc01dc2d734f0ff2628009b258fb1dd
    https://git.kernel.org/stable/c/88081ba415224cf413101def4343d660f56d082b
    https://git.kernel.org/stable/c/caa064c3c2394d03e289ebd6b0be5102eb8a5b40
    https://git.kernel.org/stable/c/eef00a82c568944f113f2de738156ac591bbd5cd
    https://git.kernel.org/stable/c/307fa8a75ab7423fa5c73573ec3d192de5027830
    https://git.kernel.org/stable/c/3266e638ba5cc1165f5e6989eb8c0720f1cc4b41
    https://git.kernel.org/stable/c/4a5e31bdd3c1702b520506d9cf8c41085f75c7f2
    https://git.kernel.org/stable/c/54538752216bf89ee88d47ad07802063a498c299
    https://git.kernel.org/stable/c/5993f121fbc01dc2d734f0ff2628009b258fb1dd
    https://git.kernel.org/stable/c/88081ba415224cf413101def4343d660f56d082b
    https://git.kernel.org/stable/c/caa064c3c2394d03e289ebd6b0be5102eb8a5b40
    https://git.kernel.org/stable/c/eef00a82c568944f113f2de738156ac591bbd5cd
    https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
    https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High