CVE-2024-26920

tracing/trigger: Fix to return error if failed to alloc snapshot

MEDIUM
5.5
CVSS Score
Published: April 17, 2024 at 03:59 PM UTC
Updated: October 15, 2026 at 01:17 AM UTC
2 products affected across 2 vendorsLinux KernelSIMATIC S7-1500 TM MFP

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix register_snapshot_trigger() to return error code if it failed to allocate a snapshot instead of 0 (success). Unless that, it will register snapshot trigger without an error.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.14.177 ≤ v < 4.154.19.117 ≤ v < 4.204.4.220 ≤ v < 4.54.9.220 ≤ v < 4.105.4.34 ≤ v < 5.55.5.19 ≤ v < 5.65.6.6 ≤ v < 5.75.7.1 ≤ v < 6.1.796.2 ≤ v < 6.6.186.7 ≤ v < 6.7.60bbe7f719985efd9adb3454679ecef0984cb680026e356e51ab3b54322eeb445c75a87ede5b9d4.14.1774.19.1174.4.2204.9.2205.4.345.5.195.6.65.75.7 rc25.7 rc35.7 rc45.7 rc55.7 rc65.7 rc757f2a2ad73e99a7594515848f4da987326a159816.86.8 rc16.8 rc27054f86f268c0d9d62b52a4497dd0e8c10a7e5c7733c611a758c68894a4480fb999637476118a8fc7c6feb347a4bb1f02e55f6814c93b5f7fab887a8a289fd864722dcf5363fec66a35965d4964df515ffa70d104691aa609a18a9a6692049deb35f431f
Vendor states this is fixed in 0958b33ef5a04ed91f61cef4760ac412080c4e08 (fixed)
Vendor states this is fixed in 36be97e9eb535fe3008a5cb040b1e56f29f2e398 (fixed)
Vendor states this is fixed in 4b001ef14baab16b553a002cb9979e31b8fc0c6b (fixed)
Vendor states this is fixed in 6022c065c9ec465d84cebff8f480db083e4ee06b (fixed)
Affected range stops below 4.10, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.15, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.6, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 5.7 (unaffected)
Vendor states this is fixed in 6.1.79 (unaffected)
Vendor states this is fixed in 6.6.18 (unaffected)
Vendor states this is fixed in 6.7.6 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)

References (13)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0958b33ef5a04ed91f61cef4760ac412080c4e08
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/36be97e9eb535fe3008a5cb040b1e56f29f2e398
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4b001ef14baab16b553a002cb9979e31b8fc0c6b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6022c065c9ec465d84cebff8f480db083e4ee06b
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
https://git.kernel.org/stable/c/2450a69d2ee75d1f0112d509ac82ef98f5ad6b5f
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
https://git.kernel.org/stable/c/26ebeffff238488466fa578be3b35b8a46e69906
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
https://git.kernel.org/stable/c/2a3073d58382157ab396734ed4e421ba9e969db1
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
https://git.kernel.org/stable/c/34925d01baf3ee62ab21c21efd9e2c44c24c004a

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card