CVE-2024-26850 is a bug in the Linux kernel's memory management debugging code (mm/debug_vm_pgtable) that causes a BUG_ON error, particularly on powerpc architectures. This occurs when debug checks for devmap PUD pte entries are enabled (CONFIG_DEBUG_VM) and the system encounters specific PUD advanced test devmap pte entries. The vulnerability primarily affects the Linux kernel. Rated as MEDIUM severity (CVSS 5.5), this vulnerability has a local attack vector (AV:L) and low attack complexity (AC:L), requiring local privileges (PR:L). While there's no direct impact on confidentiality or integrity (C:N, I:N), it can lead to high availability impact (A:H) due to system crashes. There is no evidence of active exploitation, nor is there any known exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.6, < 6.6.21CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.7.9CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.8CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:* | ||
6.8CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:* | ||
6.8CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.