---
cve: "CVE-2024-26843"
severity: "MEDIUM"
cvss: 6.0
epss: "23%"
vendor: "Linux"
kev: false
exploited: false
published: "2024-04-17 10:15:10"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-03T00:59:57+02:00"
---

# CVE-2024-26843

> 6.0 MEDIUM

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

efi: runtime: Fix potential overflow of soft-reserved region size

md_size will have been narrowed if we have >= 4GB worth of pages in a
soft-reserved region.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Keine | good |
| A Verfügbarkeit | Hoch | bad |

## Patch verfügbar (OSV)

- Kernel ≥ 5.10.211
- Kernel ≥ 5.15.150
- Kernel ≥ 6.1.80
- Kernel ≥ 6.6.19
- Kernel ≥ 6.7.7

## Referenzen

- <https://git.kernel.org/stable/c/4fff3d735baea104017f2e3c245e27cdc79f2426>
- <https://git.kernel.org/stable/c/4aa36b62c3eaa869860bf78b1146e9f2b5f782a9>
- <https://git.kernel.org/stable/c/700c3f642c32721f246e09d3a9511acf40ae42be>
- <https://git.kernel.org/stable/c/cf3d6813601fe496de7f023435e31bfffa74ae70>
- <https://git.kernel.org/stable/c/156cb12ffdcf33883304f0db645e1eadae712fe0>
- <https://git.kernel.org/stable/c/de1034b38a346ef6be25fe8792f5d1e0684d5ff4>
- <https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2024-26843) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_