CVE-2024-53082
Medium
Elevated severity or exploit probability.
CVSS base
8.4
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS — probability of exploitation (30 days)
0.2%
15.7th percentile
CISA KEV
Not listed
Weakness / dates
CWE-125
Published 2024-11-19 · modified 2026-08-04
CVSS breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | L | Local |
| Attack Complexity | L | Low |
| Privileges Required | N | None |
| User Interaction | N | None |
| Scope | U | Unchanged |
| Confidentiality | H | High |
| Integrity | H | High |
| Availability | H | High |
Timeline
- 2024-11-19 — Published (NVD)
- 2026-08-04 — Last modified (NVD)
Description
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key_length check in virtnet_probe() to avoid possible out of bound errors when setting/reading the hash key.
Affected
References
- https://git.kernel.org/stable/c/3f7d9c1964fcd16d02a8a9d4fd6f6cb60c4cc530
- https://git.kernel.org/stable/c/6a18a783b1fa590ad1ed785907263e4b86adcfe2
- https://git.kernel.org/stable/c/af0aa8aecbe8985079232902894cc4cb62795691
- https://git.kernel.org/stable/c/f3401e3c8d339ddb6ccb2e3d11ad634b7846a806
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html