01 Record

CVE-2024-26926

binder: check offset alignment in binder_get_object()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

binder: check offset alignment in binder_get_object()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.44% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 38.3% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-04-24 23:23Z2 YR AGO

Last updated

2026-08-05 11:28Z2 MO AGO

Reserved

2024-02-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-1285Improper Validation of Specified Index, Position, or Offset in InputBase

Data version

5.2

Document digest

25de8deecd0fd81305cd3e8d27feac32fae4847fa71c92755fa959890e071e08

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc056a6ba35e00ae943e377eb09abd77a6915b31a to < 68a28f551e4690db2b27b3db716c7395f6fada12, 23e9d815fad84c1bee3742a8de4bd39510435362 to < 48a1f83ca9c68518b1a783c62e6a8223144fa9fc, 7a9ad4aceb0226b391c9d3b8e4ac2e7d438b6bde to < a2fd6dbc98be1105a1d8e9e31575da8873ef115c, 6d98eb95b450a75adb4516a1d33652dc78d2b20c to < a6d2a8b211c874971ee4cf3ddd167408177f6e76, 6d98eb95b450a75adb4516a1d33652dc78d2b20c to < 1d7f1049035b2060342f11eff957cf567d810bdc, 6d98eb95b450a75adb4516a1d33652dc78d2b20c to < f01d6619045704d78613b14e2e0420bfdb7f1c15, 6d98eb95b450a75adb4516a1d33652dc78d2b20c to < aaef73821a3b0194a01bd23ca77774f704a04d40, 66e12f5b3a9733f941893a00753b10498724607d, 5.4.226 to < 5.4.275, 5.10.157 to < 5.10.216, 5.15.17 to < 5.15.157, 5.16.3 to < 5.17, 5.17—

linuxlinux_kernelc056a6ba35e0 to < 68a28f551e46, 23e9d815fad8 to < 48a1f83ca9c6, 7a9ad4aceb02 to < a2fd6dbc98be, 6d98eb95b450 to < a6d2a8b211c8, 6d98eb95b450 to < 1d7f1049035b, 6d98eb95b450 to < f01d66190457, 6d98eb95b450 to < aaef73821a3b, 5.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/68a28f551e4690db2b27b3db716c7395f6fada12
git.kernel.orghttps://git.kernel.org/stable/c/48a1f83ca9c68518b1a783c62e6a8223144fa9fc
git.kernel.orghttps://git.kernel.org/stable/c/a2fd6dbc98be1105a1d8e9e31575da8873ef115c
git.kernel.orghttps://git.kernel.org/stable/c/a6d2a8b211c874971ee4cf3ddd167408177f6e76
git.kernel.orghttps://git.kernel.org/stable/c/1d7f1049035b2060342f11eff957cf567d810bdc
git.kernel.orghttps://git.kernel.org/stable/c/f01d6619045704d78613b14e2e0420bfdb7f1c15
git.kernel.orghttps://git.kernel.org/stable/c/aaef73821a3b0194a01bd23ca77774f704a04d40
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.90-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.8.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.8.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.