P4Verified

CVE-2024-26907: linux kernel before 5.10.214 (exclusive), from 5.11 (inclusive), before 5.15.153 (exclusive), from 5.16 (inclusive)…

CVE-2024-26907. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00265 (percentile 0.17084), scored 13-Oct-2026.

Affected technology

linux kernel · before 5.10.214 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.153 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.11 (exclusive)
linux

Linux · 34f4c9554d8b2a7d2deb9503e9373b598ee3279f to before d27c48dc309da72c3b46351a1205d89687272baa, 34f4c9554d8b2a7d2deb9503e9373b598ee3279f to before 60ba938a8bc8c90e724c75f98e932f9fb7ae1b9d, 34f4c9554d8b2a7d2deb9503e9373b598ee3279f to before cad82f1671e41094acd3b9a60cd27d67a3c64a21, 34f4c9554d8b2a7d2deb9503e9373b598ee3279f to before 9a624a5f95733bac4648ecadb320ca83aa9c08fd, 34f4c9554d8b2a7d2deb9503e9373b598ee3279f to before 185fa07000e0a81d54cf8c05414cebff14469a5c, 34f4c9554d8b2a7d2deb9503e9373b598ee3279f to before 4d5e86a56615cc387d21c629f9af8fb0e958d350
Linux

Linux · 5.0
Linux

linux_kernel · 1da177e4c3f4 to before d27c48dc309d
linux

linux_kernel · 1da177e4c3f4 to before 60ba938a8bc8, 1da177e4c3f4 through cad82f1671e4, 1da177e4c3f4 through 9a624a5f9573, 1da177e4c3f4 through 185fa07000e0, 1da177e4c3f4 through 4d5e86a56615
linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/infiniband/hw/mlx5/wr.c, include/linux/mlx5/qp.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 01:47 UTC

CWE: CWE-416
CCR priority: 31.3 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS: 0.00265 · percentile 0.17084 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-26907.html