---
id: CVE-2024-26734
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  devlink: fix possible use-after-free and memory leaks in devlink_init()

  The pernet operations structure for the subsystem must be registered
  before registering the gen…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  devlink: fix possible use-after-free and memory leaks in devlink_init()

  The pernet operations structure for the subsystem must be registered
  before registering the gen…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-401
  - CWE-416
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.3, < 6.6.19'
  - 'linux_kernel >= 6.7, < 6.7.7'
  - linux_kernel = 6.8
patched:
  - linux_kernel 6.7.7
published: '2024-04-03'
updated: '2026-08-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26734'
references:
  - url: 'https://git.kernel.org/stable/c/919092bd5482b7070ae66d1daef73b600738f3a2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/def689fc26b9a9622d2e2cb0c4933dd3b1c8071c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e91d3561e28d7665f4f837880501dc8755f635a9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/919092bd5482b7070ae66d1daef73b600738f3a2'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/def689fc26b9a9622d2e2cb0c4933dd3b1c8071c'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/e91d3561e28d7665f4f837880501dc8755f635a9'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26734.json
  - url: 'https://access.redhat.com/security/cve/CVE-2024-26734'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2273244'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2024-26734'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26734'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2024040359-CVE-2024-26734-277b@gregkh/T
  - url: 'https://access.redhat.com/errata/RHSA-2024:9315'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
epss: 0.00239
epssPercentile: 0.14913
ingestedAt: '2026-08-05T10:46:48.298Z'
scores:
  nvd: 7
  vendor: 5.5
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

devlink: fix possible use-after-free and memory leaks in devlink_init()

The pernet operations structure for the subsystem must be registered
before registering the generic netlink family.

Make an unregister in case of unsuccessful registration.

## Affected

- `linux_kernel >= 6.3, < 6.6.19`
- `linux_kernel >= 6.7, < 6.7.7`
- `linux_kernel = 6.8`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.7.7`

## Vendor advisories

- **RHSA-2024:9315** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9), Red Hat Enterprise Linux Real Time (v. 9) · released 2024-11-12 · [advisory](https://access.redhat.com/errata/RHSA-2024:9315)
- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26734.json)