{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian10els/vex/2024/cve-2024-26733-els_os-debian10els.json" } ], "tracking": { "current_release_date": "2026-08-25T12:52:36Z", "generator": { "date": "2026-08-25T12:52:36Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2024-26733-ELS_OS-DEBIAN10ELS", "initial_release_date": "2024-04-03T17:15:00Z", "revision_history": [ { "date": "2024-04-03T17:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-08-25T12:52:36Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2024-26733" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 10", "product": { "name": "Debian 10", "product_id": "Debian-10", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-all-amd64@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-libc-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcpupower1@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcpupower-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libbpf-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-perf-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-config-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-kbuild-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libbpf4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-compiler-gcc-8-x86@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-all@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-image-amd64-signed-template@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-cpupower@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-amd64@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/hyperv-daemons@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-image-4.19.0-28-amd64-unsigned@4.19.325-1%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-doc-4.19@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-support-4.19.0-28@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-source-4.19@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-common@4.19.325-1%2Btuxcare.els1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-26733", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\narp: Prevent overflow in arp_req_get().\n\nsyzkaller reported an overflown write in arp_req_get(). [0]\n\nWhen ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour\nentry and copies neigh->ha to struct arpreq.arp_ha.sa_data.\n\nThe arp_ha here is struct sockaddr, not struct sockaddr_storage, so\nthe sa_data buffer is just 14 bytes.\n\nIn the splat below, 2 bytes are overflown to the next int field,\narp_flags. We initialise the field just after the memcpy(), so it's\nnot a problem.\n\nHowever, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN),\narp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL)\nin arp_ioctl() before calling arp_req_get().\n\nTo avoid the overflow, let's limit the max length of memcpy().\n\nNote that commit b5f0de6df6dc (\"net: dev: Convert sa_data to flexible\narray in struct sockaddr\") just silenced syzkaller.\n\n[0]:\nmemcpy: detected field-spanning write (size 16) of single field \"r->arp_ha.sa_data\" at net/ipv4/arp.c:1128 (size 14)\nWARNING: CPU: 0 PID: 144638 at net/ipv4/arp.c:1128 arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128\nModules linked in:\nCPU: 0 PID: 144638 Comm: syz-executor.4 Not tainted 6.1.74 #31\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014\nRIP: 0010:arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128\nCode: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb <0f> 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6\nRSP: 0018:ffffc900050b7998 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff88803a815000 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001\nRBP: ffffc900050b7a98 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000\nR13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010\nFS: 00007f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \n arp_ioctl+0x33f/0x4b0 net/ipv4/arp.c:1261\n inet_ioctl+0x314/0x3a0 net/ipv4/af_inet.c:981\n sock_do_ioctl+0xdf/0x260 net/socket.c:1204\n sock_ioctl+0x3ef/0x650 net/socket.c:1321\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:870 [inline]\n __se_sys_ioctl fs/ioctl.c:856 [inline]\n __x64_sys_ioctl+0x18e/0x220 fs/ioctl.c:856\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x37/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x64/0xce\nRIP: 0033:0x7f172b262b8d\nCode: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f172bf300b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f172b3abf80 RCX: 00007f172b262b8d\nRDX: 0000000020000000 RSI: 0000000000008954 RDI: 0000000000000003\nRBP: 00007f172b2d3493 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000\n ", "title": "Vulnerability description" }, { "category": "other", "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.", "title": "Statement" } ], "product_status": { "known_not_affected": [ "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26733" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3ab0d6f8289ba8402ca95a9fc61a34909d5e1f3a", "url": "https://git.kernel.org/stable/c/3ab0d6f8289ba8402ca95a9fc61a34909d5e1f3a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/97eaa2955db4120ce6ec2ef123e860bc32232c50", "url": "https://git.kernel.org/stable/c/97eaa2955db4120ce6ec2ef123e860bc32232c50" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a3f2c083cb575d80a7627baf3339e78fedccbb91", "url": "https://git.kernel.org/stable/c/a3f2c083cb575d80a7627baf3339e78fedccbb91" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a7d6027790acea24446ddd6632d394096c0f4667", "url": "https://git.kernel.org/stable/c/a7d6027790acea24446ddd6632d394096c0f4667" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dbc9b22d0ed319b4e29034ce0a3fe32a3ee2c587", "url": "https://git.kernel.org/stable/c/dbc9b22d0ed319b4e29034ce0a3fe32a3ee2c587" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f119f2325ba70cbfdec701000dcad4d88805d5b0", "url": "https://git.kernel.org/stable/c/f119f2325ba70cbfdec701000dcad4d88805d5b0" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241101-0013/", "url": "https://security.netapp.com/advisory/ntap-20241101-0013/" } ], "release_date": "2024-04-03T17:15:00Z", "threats": [ { "category": "impact", "details": "Moderate" }, { "category": "impact", "date": "2026-08-22T18:57:52.731007Z", "details": "The debian10els kernel is not affected by CVE-2024-26733: the vulnerable code was never introduced into this branch.", "product_ids": [ "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all" ] } ] } ] }