CVE-2024-26994 — Linux vulnerability
24 documents8 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 1
Latest updateSep 18
Description
In the Linux kernel, the following vulnerability has been resolved:
speakup: Avoid crash on very long word
In case a console is set up really large and contains a really long word
(> 256 characters), we have to stop before the length of the word buffer.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages3 packages
▶CVEListV5linux/linuxc6e3fd22cd538365bfeb82997d5b89562e077d42 — 756c5cb7c09e537b87b5d3acafcb101b2ccf394f+8
Also affects: Debian Linux 10.0, Fedora 38, 39, 40
Patches
🔴Vulnerability Details
3OSV▶
CVE-2024-26994: In the Linux kernel, the following vulnerability has been resolved: speakup: Avoid crash on very long word In case a console is set up really large an↗2024-05-01
GHSA▶
GHSA-x632-g56x-qcm8: In the Linux kernel, the following vulnerability has been resolved:
speakup: Avoid crash on very long word
In case a console is set up really large↗2024-05-01