01 Record

CVE-2024-26664

hwmon: (coretemp) Fix out-of-bounds memory access

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

hwmon: (coretemp) Fix out-of-bounds memory access

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.25% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 16.3% of scored records. A rank, not a probability.

NVD base score

7.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-04-02 06:22Z2 YR AGO

Last updated

2026-08-05 11:26Z1 MO AGO

Reserved

2024-02-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787Out-of-bounds WriteBase
CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

5ab7555bbcb488c25ee79c2a2776b87e70918e2c7ef63ef87c3f3d752473379f

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4f9dcadc55c21b39b072bb0882362c7edc4340bc to < 93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a, c00cdfc9bd767ee743ad3a4054de17aeb0afcbca to < 1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b, d9f0159da05df869071164edf0c6d7302efc5eca to < f0da068c75c20ffc5ba28243ff577531dc2af1fd, 30cf0dee372baf9b515f2d9c7218f905fddf3cdb to < a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e, 7108b80a542b9d65e44b36d64a700a83658c0b73 to < 9bce69419271eb8b2b3ab467387cb59c99d80deb, 7108b80a542b9d65e44b36d64a700a83658c0b73 to < 853a6503c586a71abf27e60a7f8c4fb28092976d, 7108b80a542b9d65e44b36d64a700a83658c0b73 to < 3a7753bda55985dc26fae17795cb10d825453ad1, 7108b80a542b9d65e44b36d64a700a83658c0b73 to < 4e440abc894585a34c2904a32cd54af1742311b3, d1de8e1ae924d9dc31548676e4a665b52ebee27e, 4.19.264 to < 4.19.307, 5.4.221 to < 5.4.269, 5.10.152 to < 5.10.210, 5.15.76 to < 5.15.149, 6.0.6 to < 6.1, 6.1—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a
git.kernel.orghttps://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b
git.kernel.orghttps://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd
git.kernel.orghttps://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e
git.kernel.orghttps://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb
git.kernel.orghttps://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d
git.kernel.orghttps://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1
git.kernel.orghttps://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

01 Record index

CVE-2024-26664

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-26664

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References