What’s Vulnerable › Vulnerabilities

CVE-2024-26651: sr9800: Add check for usbnet_get_endpoints

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-27 · updated 2026-10-15

Description

In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnet_get_endpoints Add check for usbnet_get_endpoints() and return the error if it fails in order to transfer the error.

Affected products

• Linux kernel: from 3.14 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23 — fixed in 4.19.311, 5.10.214, 5.15.153, 5.4.273, 6.1.83, 6.6.23

How to fix

Upgrade to a fixed version: Linux kernel 4.19.311, 5.10.214, 5.15.153, 5.4.273. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/07161b2416f740a2cb87faa5566873f401440a61
• https://git.kernel.org/stable/c/276873ae26c8d75b00747c1dadb9561d6ef20581
• https://git.kernel.org/stable/c/424eba06ed405d557077339edb19ce0ebe39e7c7
• https://git.kernel.org/stable/c/6b4a39acafaf0186ed8e97c16e0aa6fca0e52009
• https://git.kernel.org/stable/c/8a8b6a24684bc278036c3f159f7b3a31ad89546a
• https://git.kernel.org/stable/c/9c402819620a842cbfe39359a3ddfaac9adc8384
• https://git.kernel.org/stable/c/e39a3a14eafcf17f03c037290b78c8f483529028
• https://git.kernel.org/stable/c/efba65777f98457773c5b65e3135c6132d3b015f
• https://git.kernel.org/stable/c/f546cc19f9b82975238d0ba413adc27714750774
• https://git.kernel.org/stable/c/07161b2416f740a2cb87faa5566873f401440a61
• https://git.kernel.org/stable/c/276873ae26c8d75b00747c1dadb9561d6ef20581
• https://git.kernel.org/stable/c/424eba06ed405d557077339edb19ce0ebe39e7c7

Get alerted when CVE-2024-26651 or the next vulnerability affects your stack