Back to CVE records
Medium 5.5Published Mar 27, 2024
CVE-2024-26651sr9800: Add check for usbnet_get_endpoints
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnet_get_endpoints Add check for usbnet_get_endpoints() and return the error if it fails in order to transfer the error.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before 424eba06ed405d557077339edb19ce0ebe39e7c7; 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 builds before 8a8b6a24684bc278036c3f159f7b3a31ad89546a; 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 builds before 6b4a39acafaf0186ed8e97c16e0aa6fca0e52009; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before 276873ae26c8d75b00747c1dadb9561d6ef20581; 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 builds before 9c402819620a842cbfe39359a3ddfaac9adc8384; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before e39a3a14eafcf17f03c037290b78c8f483529028; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before efba65777f98457773c5b65e3135c6132d3b015f; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before f546cc19f9b82975238d0ba413adc27714750774; and 1 more ranges | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 3.14 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2 | NVD |
References
- https://git.kernel.org/stable/c/424eba06ed405d557077339edb19ce0ebe39e7c7patch
- https://git.kernel.org/stable/c/8a8b6a24684bc278036c3f159f7b3a31ad89546apatch
- https://git.kernel.org/stable/c/6b4a39acafaf0186ed8e97c16e0aa6fca0e52009patch
- https://git.kernel.org/stable/c/276873ae26c8d75b00747c1dadb9561d6ef20581patch
- https://git.kernel.org/stable/c/9c402819620a842cbfe39359a3ddfaac9adc8384patch
- https://git.kernel.org/stable/c/e39a3a14eafcf17f03c037290b78c8f483529028patch
- https://git.kernel.org/stable/c/efba65777f98457773c5b65e3135c6132d3b015fpatch
- https://git.kernel.org/stable/c/f546cc19f9b82975238d0ba413adc27714750774patch
- https://git.kernel.org/stable/c/07161b2416f740a2cb87faa5566873f401440a61patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlmailing-list
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlmailing-list
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AXURWFKAKFEIUBN7RTCXI7GZYAHXNBX5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SI2D7K2T6QCWALKLYEWZ22P4UXMEBCGB/
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.