{"id":"CVE-2024-26734","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndevlink: fix possible use-after-free and memory leaks in devlink_init()\n\nThe pernet operations structure for the subsystem must be registered\nbefore registering the gen…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndevlink: fix possible use-after-free and memory leaks in devlink_init()\n\nThe pernet operations structure for the subsystem must be registered\nbefore registering the gen…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-401","CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.3, < 6.6.19","linux_kernel >= 6.7, < 6.7.7","linux_kernel = 6.8"],"patched":["linux_kernel 6.7.7"],"published":"2024-04-03","updated":"2026-08-04","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-26734","references":[{"url":"https://git.kernel.org/stable/c/919092bd5482b7070ae66d1daef73b600738f3a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/def689fc26b9a9622d2e2cb0c4933dd3b1c8071c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e91d3561e28d7665f4f837880501dc8755f635a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/919092bd5482b7070ae66d1daef73b600738f3a2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/def689fc26b9a9622d2e2cb0c4933dd3b1c8071c","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/e91d3561e28d7665f4f837880501dc8755f635a9","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26734.json"},{"url":"https://access.redhat.com/security/cve/CVE-2024-26734"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273244"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-26734"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-26734"},{"url":"https://lore.kernel.org/linux-cve-announce/2024040359-CVE-2024-26734-277b@gregkh/T"},{"url":"https://access.redhat.com/errata/RHSA-2024:9315"}],"tags":["nvd","csaf","vex","red-hat"],"epss":0.00239,"epssPercentile":0.14913,"ingestedAt":"2026-08-05T10:46:48.298Z","scores":{"nvd":7,"vendor":5.5},"slug":"CVE-2024-26734","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndevlink: fix possible use-after-free and memory leaks in devlink_init()\n\nThe pernet operations structure for the subsystem must be registered\nbefore registering the generic netlink family.\n\nMake an unregister in case of unsuccessful registration.\n\n## Affected\n\n- `linux_kernel >= 6.3, < 6.6.19`\n- `linux_kernel >= 6.7, < 6.7.7`\n- `linux_kernel = 6.8`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.7.7`\n\n## Vendor advisories\n\n- **RHSA-2024:9315** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9), Red Hat Enterprise Linux Real Time (v. 9) · released 2024-11-12 · [advisory](https://access.redhat.com/errata/RHSA-2024:9315)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26734.json)","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}