{
"document": {
"aggregate_severity": {
"text": "High"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "TuxCare License Agreement",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://tuxcare.com/contact/",
"name": "TuxCare",
"namespace": "https://tuxcare.com/"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.tuxcare.com/csaf/v2/els_os/debian10els/vex/2024/cve-2024-26782-els_os-debian10els.json"
}
],
"tracking": {
"current_release_date": "2026-08-25T12:54:18Z",
"generator": {
"date": "2026-08-25T12:54:18Z",
"engine": {
"name": "pyCSAF"
}
},
"id": "CVE-2024-26782-ELS_OS-DEBIAN10ELS",
"initial_release_date": "2024-04-04T08:20:16Z",
"revision_history": [
{
"date": "2024-04-04T08:20:16Z",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-25T12:54:18Z",
"number": "2",
"summary": "Official Publication"
}
],
"status": "final",
"version": "2"
},
"title": "Security update on CVE-2024-26782"
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian 10",
"product": {
"name": "Debian 10",
"product_id": "Debian-10",
"product_identification_helper": {
"cpe": "cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_family",
"name": "Debian"
}
],
"category": "vendor",
"name": "Software in the Public Interest, Inc."
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-all-amd64@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-libc-dev@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/libcpupower1@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/libcpupower-dev@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/libbpf-dev@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-perf-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-config-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-kbuild-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/libbpf4.19@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-compiler-gcc-8-x86@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-all@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-image-amd64-signed-template@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-cpupower@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-amd64@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/hyperv-daemons@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
},
{
"category": "product_version",
"name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64",
"product": {
"name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64",
"product_id": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-image-4.19.0-28-amd64-unsigned@4.19.325-1%2Btuxcare.els1?arch=amd64"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all",
"product": {
"name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all",
"product_id": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-doc-4.19@4.19.325-1%2Btuxcare.els1?arch=all"
}
}
},
{
"category": "product_version",
"name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all",
"product": {
"name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all",
"product_id": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-support-4.19.0-28@4.19.325-1%2Btuxcare.els1?arch=all"
}
}
},
{
"category": "product_version",
"name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all",
"product": {
"name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all",
"product_id": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-source-4.19@4.19.325-1%2Btuxcare.els1?arch=all"
}
}
},
{
"category": "product_version",
"name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all",
"product": {
"name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all",
"product_id": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all",
"product_identification_helper": {
"purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-common@4.19.325-1%2Btuxcare.els1?arch=all"
}
}
}
],
"category": "architecture",
"name": "all"
}
],
"category": "vendor",
"name": "TuxCare"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10",
"product_id": "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all"
},
"product_reference": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10",
"product_id": "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all"
},
"product_reference": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10",
"product_id": "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all"
},
"product_reference": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10",
"product_id": "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all"
},
"product_reference": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10",
"product_id": "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64"
},
"product_reference": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64",
"relates_to_product_reference": "Debian-10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-26782",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "description",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix double-free on socket dismantle\n\nwhen MPTCP server accepts an incoming connection, it clones its listener\nsocket. However, the pointer to 'inet_opt' for the new socket has the same\nvalue as the original one: as a consequence, on program exit it's possible\nto observe the following splat:\n\n BUG: KASAN: double-free in inet_sock_destruct+0x54f/0x8b0\n Free of addr ffff888485950880 by task swapper/25/0\n\n CPU: 25 PID: 0 Comm: swapper/25 Kdump: loaded Not tainted 6.8.0-rc1+ #609\n Hardware name: Supermicro SYS-6027R-72RF/X9DRH-7TF/7F/iTF/iF, BIOS 3.0 07/26/2013\n Call Trace:\n \n dump_stack_lvl+0x32/0x50\n print_report+0xca/0x620\n kasan_report_invalid_free+0x64/0x90\n __kasan_slab_free+0x1aa/0x1f0\n kfree+0xed/0x2e0\n inet_sock_destruct+0x54f/0x8b0\n __sk_destruct+0x48/0x5b0\n rcu_do_batch+0x34e/0xd90\n rcu_core+0x559/0xac0\n __do_softirq+0x183/0x5a4\n irq_exit_rcu+0x12d/0x170\n sysvec_apic_timer_interrupt+0x6b/0x80\n \n \n asm_sysvec_apic_timer_interrupt+0x16/0x20\n RIP: 0010:cpuidle_enter_state+0x175/0x300\n Code: 30 00 0f 84 1f 01 00 00 83 e8 01 83 f8 ff 75 e5 48 83 c4 18 44 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc fb 45 85 ed <0f> 89 60 ff ff ff 48 c1 e5 06 48 c7 43 18 00 00 00 00 48 83 44 2b\n RSP: 0018:ffff888481cf7d90 EFLAGS: 00000202\n RAX: 0000000000000000 RBX: ffff88887facddc8 RCX: 0000000000000000\n RDX: 1ffff1110ff588b1 RSI: 0000000000000019 RDI: ffff88887fac4588\n RBP: 0000000000000004 R08: 0000000000000002 R09: 0000000000043080\n R10: 0009b02ea273363f R11: ffff88887fabf42b R12: ffffffff932592e0\n R13: 0000000000000004 R14: 0000000000000000 R15: 00000022c880ec80\n cpuidle_enter+0x4a/0xa0\n do_idle+0x310/0x410\n cpu_startup_entry+0x51/0x60\n start_secondary+0x211/0x270\n secondary_startup_64_no_verify+0x184/0x18b\n \n\n Allocated by task 6853:\n kasan_save_stack+0x1c/0x40\n kasan_save_track+0x10/0x30\n __kasan_kmalloc+0xa6/0xb0\n __kmalloc+0x1eb/0x450\n cipso_v4_sock_setattr+0x96/0x360\n netlbl_sock_setattr+0x132/0x1f0\n selinux_netlbl_socket_post_create+0x6c/0x110\n selinux_socket_post_create+0x37b/0x7f0\n security_socket_post_create+0x63/0xb0\n __sock_create+0x305/0x450\n __sys_socket_create.part.23+0xbd/0x130\n __sys_socket+0x37/0xb0\n __x64_sys_socket+0x6f/0xb0\n do_syscall_64+0x83/0x160\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\n Freed by task 6858:\n kasan_save_stack+0x1c/0x40\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x12c/0x1f0\n kfree+0xed/0x2e0\n inet_sock_destruct+0x54f/0x8b0\n __sk_destruct+0x48/0x5b0\n subflow_ulp_release+0x1f0/0x250\n tcp_cleanup_ulp+0x6e/0x110\n tcp_v4_destroy_sock+0x5a/0x3a0\n inet_csk_destroy_sock+0x135/0x390\n tcp_fin+0x416/0x5c0\n tcp_data_queue+0x1bc8/0x4310\n tcp_rcv_state_process+0x15a3/0x47b0\n tcp_v4_do_rcv+0x2c1/0x990\n tcp_v4_rcv+0x41fb/0x5ed0\n ip_protocol_deliver_rcu+0x6d/0x9f0\n ip_local_deliver_finish+0x278/0x360\n ip_local_deliver+0x182/0x2c0\n ip_rcv+0xb5/0x1c0\n __netif_receive_skb_one_core+0x16e/0x1b0\n process_backlog+0x1e3/0x650\n __napi_poll+0xa6/0x500\n net_rx_action+0x740/0xbb0\n __do_softirq+0x183/0x5a4\n\n The buggy address belongs to the object at ffff888485950880\n which belongs to the cache kmalloc-64 of size 64\n The buggy address is located 0 bytes inside of\n 64-byte region [ffff888485950880, ffff8884859508c0)\n\n The buggy address belongs to the physical page:\n page:0000000056d1e95e refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888485950700 pfn:0x485950\n flags: 0x57ffffc0000800(slab|node=1|zone=2|lastcpupid=0x1fffff)\n page_type: 0xffffffff()\n raw: 0057ffffc0000800 ffff88810004c640 ffffea00121b8ac0 dead000000000006\n raw: ffff888485950700 0000000000200019 00000001ffffffff 0000000000000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ffff888485950780: fa fb fb\n---truncated---",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.",
"title": "Statement"
}
],
"product_status": {
"known_not_affected": [
"Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all",
"Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all",
"Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all",
"Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://cve.tuxcare.com/els/cve/CVE-2024-26782"
},
{
"category": "external",
"summary": "https://git.kernel.org/stable/c/10048689def7e40a4405acda16fdc6477d4ecc5c",
"url": "https://git.kernel.org/stable/c/10048689def7e40a4405acda16fdc6477d4ecc5c"
},
{
"category": "external",
"summary": "https://git.kernel.org/stable/c/4a4eeb6912538c2d0b158e8d11b62d96c1dada4e",
"url": "https://git.kernel.org/stable/c/4a4eeb6912538c2d0b158e8d11b62d96c1dada4e"
},
{
"category": "external",
"summary": "https://git.kernel.org/stable/c/85933e80d077c9ae2227226beb86c22f464059cc",
"url": "https://git.kernel.org/stable/c/85933e80d077c9ae2227226beb86c22f464059cc"
},
{
"category": "external",
"summary": "https://git.kernel.org/stable/c/ce0809ada38dca8d6d41bb57ab40494855c30582",
"url": "https://git.kernel.org/stable/c/ce0809ada38dca8d6d41bb57ab40494855c30582"
},
{
"category": "external",
"summary": "https://git.kernel.org/stable/c/d93fd40c62397326046902a2c5cb75af50882a85",
"url": "https://git.kernel.org/stable/c/d93fd40c62397326046902a2c5cb75af50882a85"
},
{
"category": "external",
"summary": "https://git.kernel.org/stable/c/f74362a004225df935863dea6eb7d82daaa5b16e",
"url": "https://git.kernel.org/stable/c/f74362a004225df935863dea6eb7d82daaa5b16e"
},
{
"category": "external",
"summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"
}
],
"release_date": "2024-04-04T08:20:16Z",
"threats": [
{
"category": "impact",
"details": "Important"
},
{
"category": "impact",
"date": "2026-08-06T12:12:11.363940Z",
"details": "Not introduced: MPTCP (merged upstream in 5.6) is absent in debian10els (4.19).",
"product_ids": [
"Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all",
"Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all",
"Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64",
"Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all",
"Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all"
]
}
]
}
]
}