CVE-2024-26664

hwmon: (coretemp) Fix out-of-bounds memory access

State: Published
Severity: 7.8 High
Published: Apr 2, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (coretemp) Fix out-of-bounds memory access

Fix a bug that pdata->cpu_map[] is set before out-of-bounds check. The problem might be triggered on systems with more than 128 cores per package.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4f9dcadc55c21b39b072bb0882362c7edc4340bc to before 93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6aAffected c00cdfc9bd767ee743ad3a4054de17aeb0afcbca to before 1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8bAffected d9f0159da05df869071164edf0c6d7302efc5eca to before f0da068c75c20ffc5ba28243ff577531dc2af1fdAffected 30cf0dee372baf9b515f2d9c7218f905fddf3cdb to before a16afec8e83c56b14a4a73d2e3fb8eec3a8a057eAffected 7108b80a542b9d65e44b36d64a700a83658c0b73 to before 9bce69419271eb8b2b3ab467387cb59c99d80debAffected 7108b80a542b9d65e44b36d64a700a83658c0b73 to before 853a6503c586a71abf27e60a7f8c4fb28092976dAffected 7108b80a542b9d65e44b36d64a700a83658c0b73 to before 3a7753bda55985dc26fae17795cb10d825453ad1Affected 7108b80a542b9d65e44b36d64a700a83658c0b73 to before 4e440abc894585a34c2904a32cd54af1742311b3Affected d1de8e1ae924d9dc31548676e4a665b52ebee27eAffected 4.19.264 to before 4.19.307Affected 5.4.221 to before 5.4.269Affected 5.10.152 to before 5.10.210Affected 5.15.76 to before 5.15.149Affected 6.0.6 to before 6.1Affected
LinuxLinux	6.1Affected before 6.1Not affected 4.19.307 through 4.19.Not affected 5.4.269 through 5.4.Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.78 through 6.1.Not affected 6.6.17 through 6.6.Not affected 6.7.5 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

4f9dcadc55c21b39b072bb0882362c7edc4340bc to before 93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6aAffected
c00cdfc9bd767ee743ad3a4054de17aeb0afcbca to before 1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8bAffected
d9f0159da05df869071164edf0c6d7302efc5eca to before f0da068c75c20ffc5ba28243ff577531dc2af1fdAffected
30cf0dee372baf9b515f2d9c7218f905fddf3cdb to before a16afec8e83c56b14a4a73d2e3fb8eec3a8a057eAffected
7108b80a542b9d65e44b36d64a700a83658c0b73 to before 9bce69419271eb8b2b3ab467387cb59c99d80debAffected
7108b80a542b9d65e44b36d64a700a83658c0b73 to before 853a6503c586a71abf27e60a7f8c4fb28092976dAffected
7108b80a542b9d65e44b36d64a700a83658c0b73 to before 3a7753bda55985dc26fae17795cb10d825453ad1Affected
7108b80a542b9d65e44b36d64a700a83658c0b73 to before 4e440abc894585a34c2904a32cd54af1742311b3Affected
d1de8e1ae924d9dc31548676e4a665b52ebee27eAffected
4.19.264 to before 4.19.307Affected
5.4.221 to before 5.4.269Affected
5.10.152 to before 5.10.210Affected
5.15.76 to before 5.15.149Affected
6.0.6 to before 6.1Affected

LinuxLinux

6.1Affected
before 6.1Not affected
4.19.307 through 4.19.*Not affected
5.4.269 through 5.4.*Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.78 through 6.1.*Not affected
6.6.17 through 6.6.*Not affected
6.7.5 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.