CVE-2024-26945

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix nr_cpus < nr_iaa case

If nr_cpus < nr_iaa, the calculated cpus_per_iaa will be 0, which causes a divide-by-0 in rebalance_wq_table().

Make sure cpus_per_iaa is 1 in that case, and also in the nr_iaa == 0 case, even though cpus_per_iaa is never used if nr_iaa == 0, for paranoia.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-369

Affected software

VendorProductVersions
LinuxLinux>= ea7a5cbb43696cfacf73e61916d1860ac30b5b2f, < a5ca1be7f9817de4e93085778b3ee2219bdc2664; >= ea7a5cbb43696cfacf73e61916d1860ac30b5b2f, < 5a7e89d3315d1be86aff8a8bf849023cda6547f7
LinuxLinux6.8
linuxlinux_kernel1da177e4c3f4
linuxlinux_kernel—
linuxlinux_kernel—

References

Timeline

Published
May 1, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-269465.5In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe addressCVE-2024-269475.5In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addreCVE-2024-269485.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dc_state NULL check in dc_state_release [How] CCVE-2024-269495.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit BecauCVE-2024-26955.4The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions uCVE-2024-269507.8In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The prevCVE-2024-269517.8In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via is_dead instead of emptCVE-2024-269527.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I fouCVE-2024-269535.5In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reoCVE-2024-269547.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffCVE-2024-269557.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent kernel bug at submit_bh_wbc() Fix a bug where nilfs_geCVE-2024-269567.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix failure to detect DAT corruption in btree and direct mappin
CVE-2024-26945: High severity, CVSS 8.4 | Vulnix