{
  "cveId": "CVE-2024-26795",
  "url": "https://patchblox.com/security/cve/CVE-2024-26795",
  "summary": "CVE-2024-26795 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-26795, released April 4, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  riscv: Sparse-Memory/vmemmap out-of-bounds fix...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  riscv: Sparse-Memory/vmemmap out-of-bounds fix  Offset vmemmap so that the first page of vmemmap will be mapped to the first page of physical memory in order to ensure that vmemmap\u2019s bounds will be respected during pfn_to_page()/page_to_pfn() operations. The conversion macros will produce correct SV39/48/57 addresses for every possible/valid DRAM_BASE inside the physical memory limits.  v2:Address Alex\u0027s comments",
  "published": "2024-04-04T09:15:08Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00239,
  "epssPercentile": 0.15078,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.82-1",
      "fix": "DEBIAN-CVE-2024-26795",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26795",
      "released": "2024-04-04T09:15:08Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.7.9-1",
      "fix": "DEBIAN-CVE-2024-26795",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26795",
      "released": "2024-04-04T09:15:08Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.7.9-1",
      "fix": "DEBIAN-CVE-2024-26795",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26795",
      "released": "2024-04-04T09:15:08Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}