CVE-2024-26817

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

amdkfd: use calloc instead of kzalloc to avoid integer overflow

This uses calloc instead of doing the multiplication which might overflow.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
LinuxLinux>= 4a488a7ad71401169cecee75dc94bcce642e2c53, < e6721ea845fcb93a764a92bd40f1afc0d6c69751; >= 4a488a7ad71401169cecee75dc94bcce642e2c53, < 8b0564704255c6b3c6a7188e86939f754e1577c0; >= 4a488a7ad71401169cecee75dc94bcce642e2c53, < fcbd99b3c73309107e3be71f20dff9414df64f91; >= 4a488a7ad71401169cecee75dc94bcce642e2c53, < cbac7de1d9901521e78cdc34e15451df3611f2ad; >= 4a488a7ad71401169cecee75dc94bcce642e2c53, < e6768c6737f4c02cba193a3339f0cc2907f0b86a; >= 4a488a7ad71401169cecee75dc94bcce642e2c53, < 315eb3c2df7e4cb18e3eacfa18a53a46f2bf0ef7; >= 4a488a7ad71401169cecee75dc94bcce642e2c53, < 0c33d11153949310d76631d8f4a4736519eacd3a; >= 4a488a7ad71401169cecee75dc94bcce642e2c53, < 3b0daecfeac0103aba8b293df07a0cbaf8b43f29
LinuxLinux3.19

References

Timeline

Published
Apr 13, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-268185.5In the Linux kernel, the following vulnerability has been resolved: tools/rtla: Fix clang warning about mount_point var size clang is repoCVE-2024-26826.1A vulnerability classified as problematic has been found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the fCVE-2024-268205.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed ICVE-2024-268225.5In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts WhCVE-2024-268235.5In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems WhileCVE-2024-268245.5In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path WCVE-2024-268255.5In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free rx_data_reassembly skb on NCI device cleanup rx_data_reCVE-2024-268265.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data re-injection from stale subflow When the MPTCP PM deteCVE-2024-268289.4In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we stepCVE-2024-268295.5In the Linux kernel, the following vulnerability has been resolved: media: ir_toy: fix a memleak in irtoy_tx When irtoy_command fails, bufCVE-2024-26836.1A vulnerability classified as problematic was found in Campcodes Online Job Finder System 1.0. Affected by this vulnerability is an unknown CVE-2024-268306.3In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Cur
CVE-2024-26817: Medium severity, CVSS 5.5 | Vulnix