CVE-2024-26585

Note

Priority reason:
It may be used for local privilege escalation.
USN-6765-1 for linux-oem-6.5 wrongly stated that this CVE
was fixed in version 6.5.0-1022.23. The mentioned notice was revoked and
the state of the fix for linux-oem-6.5 was recovered to the previous
state.

Parameter	Value
Base score	4.7
Attack vector	Local
Attack complexity	High
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2024-26585

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Not vulnerable (4.13.0-16.19)
	focal	Pending (5.4.0-190.210)
	jammy	Released (5.15.0-112.122)
	mantic	Released (6.5.0-41.41)
	noble	Not vulnerable (6.8.0-20.20)
	trusty	Not vulnerable (3.11.0-12.19)
	upstream	Released (6.8~rc5)
	xenial	Not vulnerable (4.4.0-2.16)
	Patches: Introduced by a42055e8d2c30d4decfc13ce943d09c7b9dad221 Fixed by e01e3934a1b2d122919f73bc6ddbe1cdafc4bbdb
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support)
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Not vulnerable (4.15.0-1001.1)
	focal	Pending (5.4.0-1129.139)
	jammy	Released (5.15.0-1063.69)
	mantic	Released (6.5.0-1021.21)
	noble	Not vulnerable (6.8.0-1006.6)
	trusty	Not vulnerable (4.4.0-1002.2)
	upstream	Released (6.8~rc5)
	xenial	Not vulnerable (4.4.0-1001.10)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.3)
	xenial	Does not exist
linux-aws-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.13)
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.13)