{"id":"CVE-2024-26679","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ninet: read sk->sk_family once in inet_recv_error()\n\ninet_recv_error() is called without holding the socket lock.\n\nIPv6 socket could mutate to IPv4 with IPV6_ADDRFORM\nso…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ninet: read sk->sk_family once in inet_recv_error()\n\ninet_recv_error() is called without holding the socket lock.\n\nIPv6 socket could mutate to IPv4 with IPV6_ADDRFORM\nso…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-667"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 3.18, < 4.19.307","linux_kernel >= 4.20, < 5.4.269","linux_kernel >= 5.5, < 5.10.210","linux_kernel >= 5.11, < 5.15.149","linux_kernel >= 5.16, < 6.1.78","linux_kernel >= 6.2, < 6.6.17","linux_kernel >= 6.7, < 6.7.5","linux_kernel = 6.8","debian_linux = 10.0"],"patched":["linux_kernel 6.7.5"],"published":"2024-04-02","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:17:22.473","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-26679","references":[{"url":"https://git.kernel.org/stable/c/307fa8a75ab7423fa5c73573ec3d192de5027830","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3266e638ba5cc1165f5e6989eb8c0720f1cc4b41","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4a5e31bdd3c1702b520506d9cf8c41085f75c7f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/54538752216bf89ee88d47ad07802063a498c299","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5993f121fbc01dc2d734f0ff2628009b258fb1dd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/88081ba415224cf413101def4343d660f56d082b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/caa064c3c2394d03e289ebd6b0be5102eb8a5b40","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/eef00a82c568944f113f2de738156ac591bbd5cd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/307fa8a75ab7423fa5c73573ec3d192de5027830","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/3266e638ba5cc1165f5e6989eb8c0720f1cc4b41","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/4a5e31bdd3c1702b520506d9cf8c41085f75c7f2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/54538752216bf89ee88d47ad07802063a498c299","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/5993f121fbc01dc2d734f0ff2628009b258fb1dd","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/88081ba415224cf413101def4343d660f56d082b","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/caa064c3c2394d03e289ebd6b0be5102eb8a5b40","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/eef00a82c568944f113f2de738156ac591bbd5cd","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00184,"epssPercentile":0.07866,"ingestedAt":"2026-10-15T03:30:12.647Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-04-02T18:38:38.646941Z"},"slug":"CVE-2024-26679","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ninet: read sk->sk_family once in inet_recv_error()\n\ninet_recv_error() is called without holding the socket lock.\n\nIPv6 socket could mutate to IPv4 with IPV6_ADDRFORM\nsocket option and trigger a KCSAN warning.\n\n## Affected\n\n- `linux_kernel >= 3.18, < 4.19.307`\n- `linux_kernel >= 4.20, < 5.4.269`\n- `linux_kernel >= 5.5, < 5.10.210`\n- `linux_kernel >= 5.11, < 5.15.149`\n- `linux_kernel >= 5.16, < 6.1.78`\n- `linux_kernel >= 6.2, < 6.6.17`\n- `linux_kernel >= 6.7, < 6.7.5`\n- `linux_kernel = 6.8`\n- `debian_linux = 10.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.7.5`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}