CVE-2024-26920tracing/trigger: Fix to return error if failed to alloc snapshot
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix register_snapshot_trigger() to return error code if it failed to allocate a snapshot instead of 0 (success). Unless that, it will register snapshot trigger without an error.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0bbe7f719985efd9adb3454679ecef0984cb6800 before 36be97e9eb535fe3008a5cb040b1e56f29f2e398; from 0bbe7f719985efd9adb3454679ecef0984cb6800 before 6022c065c9ec465d84cebff8f480db083e4ee06b; from 0bbe7f719985efd9adb3454679ecef0984cb6800 before 4b001ef14baab16b553a002cb9979e31b8fc0c6b; from 0bbe7f719985efd9adb3454679ecef0984cb6800 before 0958b33ef5a04ed91f61cef4760ac412080c4e08; 7c6feb347a4bb1f02e55f6814c93b5f7fab887a8; a289fd864722dcf5363fec66a35965d4964df515; 7054f86f268c0d9d62b52a4497dd0e8c10a7e5c7; 57f2a2ad73e99a7594515848f4da987326a15981; and 10 more ranges | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 4.4.220 before 4.5; from 4.9.220 before 4.10; from 4.14.177 before 4.15; from 4.19.117 before 4.20; from 5.4.34 before 5.5; from 5.5.19 before 5.6; from 5.6.6 before 5.7; from 5.7.1 before 6.1.79; and 11 more ranges | NVD |
References
- https://git.kernel.org/stable/c/36be97e9eb535fe3008a5cb040b1e56f29f2e398patch
- https://git.kernel.org/stable/c/6022c065c9ec465d84cebff8f480db083e4ee06bpatch
- https://git.kernel.org/stable/c/4b001ef14baab16b553a002cb9979e31b8fc0c6bpatch
- https://git.kernel.org/stable/c/0958b33ef5a04ed91f61cef4760ac412080c4e08patch
- https://git.kernel.org/stable/c/2450a69d2ee75d1f0112d509ac82ef98f5ad6b5fpatch
- https://git.kernel.org/stable/c/26ebeffff238488466fa578be3b35b8a46e69906patch
- https://git.kernel.org/stable/c/2a3073d58382157ab396734ed4e421ba9e969db1patch
- https://git.kernel.org/stable/c/34925d01baf3ee62ab21c21efd9e2c44c24c004apatch
- https://git.kernel.org/stable/c/56cfbe60710772916a5ba092c99542332b48e870patch
- https://git.kernel.org/stable/c/8ffd5590f4d6ef5460acbeac7fbdff7025f9b419patch
- https://git.kernel.org/stable/c/b5085b5ac1d96ea2a8a6240f869655176ce44197patch
- https://git.kernel.org/stable/c/bcf4a115a5068f3331fafb8c176c1af0da3d8b19patch
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.