CVE-2024-26843

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-26843
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26843.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26843
Downstream
Related
Published
2024-04-17T10:10:08.089Z
Modified
2026-07-15T01:48:59.814058922Z
Severity
  • 6.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
efi: runtime: Fix potential overflow of soft-reserved region size
Details

In the Linux kernel, the following vulnerability has been resolved:

efi: runtime: Fix potential overflow of soft-reserved region size

md_size will have been narrowed if we have >= 4GB worth of pages in a soft-reserved region.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26843.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
16993c0f0a43213e23666ea40e9163887f593ac7
Fixed
4fff3d735baea104017f2e3c245e27cdc79f2426
Fixed
4aa36b62c3eaa869860bf78b1146e9f2b5f782a9
Fixed
700c3f642c32721f246e09d3a9511acf40ae42be
Fixed
cf3d6813601fe496de7f023435e31bfffa74ae70
Fixed
156cb12ffdcf33883304f0db645e1eadae712fe0
Fixed
de1034b38a346ef6be25fe8792f5d1e0684d5ff4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26843.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.211
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.150
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.80
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.19
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26843.json"