CVE-2024-26994

speakup: Avoid crash on very long word

State: Published
Severity: 7.8 High
Published: May 1, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

speakup: Avoid crash on very long word

In case a console is set up really large and contains a really long word (> 256 characters), we have to stop before the length of the word buffer.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.9 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 756c5cb7c09e537b87b5d3acafcb101b2ccf394fAffected c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 8f6b62125befe1675446923e4171eac2c012959cAffected c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 6401038acfa24cba9c28cce410b7505efadd0222Affected c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 0d130158db29f5e0b3893154908cf618896450a8Affected c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 89af25bd4b4bf6a71295f07e07a8ae7dc03c6595Affected c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 8defb1d22ba0395b81feb963b96e252b097ba76fAffected c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 0efb15c14c493263cb3a5f65f5ddfd4603d19a76Affected c6e3fd22cd538365bfeb82997d5b89562e077d42 to before c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1Affected
LinuxLinux	2.6.37Affected before 2.6.37Not affected 4.19.313 through 4.19.Not affected 5.4.275 through 5.4.Not affected 5.10.216 through 5.10.Not affected 5.15.157 through 5.15.Not affected 6.1.88 through 6.1.Not affected 6.6.29 through 6.6.Not affected 6.8.8 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 756c5cb7c09e537b87b5d3acafcb101b2ccf394fAffected
c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 8f6b62125befe1675446923e4171eac2c012959cAffected
c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 6401038acfa24cba9c28cce410b7505efadd0222Affected
c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 0d130158db29f5e0b3893154908cf618896450a8Affected
c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 89af25bd4b4bf6a71295f07e07a8ae7dc03c6595Affected
c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 8defb1d22ba0395b81feb963b96e252b097ba76fAffected
c6e3fd22cd538365bfeb82997d5b89562e077d42 to before 0efb15c14c493263cb3a5f65f5ddfd4603d19a76Affected
c6e3fd22cd538365bfeb82997d5b89562e077d42 to before c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1Affected

LinuxLinux

2.6.37Affected
before 2.6.37Not affected
4.19.313 through 4.19.*Not affected
5.4.275 through 5.4.*Not affected
5.10.216 through 5.10.*Not affected
5.15.157 through 5.15.*Not affected
6.1.88 through 6.1.*Not affected
6.6.29 through 6.6.*Not affected
6.8.8 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.