Security readout for executives and security teams
Plain-English summary
This Linux kernel flaw can crash a host when the RDMA SRP target module is loaded with the srpt_service_guid parameter. The documented impact is availability loss, not data theft or privilege escalation. Risk is mainly for systems using or allowing the ib_srpt kernel module.
Executive priority
Prioritize patching storage, RDMA, and virtualization infrastructure where a kernel crash could interrupt critical services. Broader desktop or general server urgency is lower unless ib_srpt is used or untrusted users can influence module loading.
Technical view
CVE-2024-26744 is a NULL pointer dereference in the Linux kernel RDMA/srpt code path. Loading ib_srpt with srpt_service_guid set can trigger a kernel crash during module parameter parsing. CVSS is 5.5: local attack vector, low complexity, low privileges, no user interaction, high availability impact.
Likely exposure
Exposure is limited to Linux systems with affected kernels where the ib_srpt RDMA SRP target module is present and can be loaded with that parameter. RDMA/SAN, virtualization, and storage hosts deserve priority review. No remote network attack path is stated in the provided sources.
Exploitation context
The bundle says KEV is false and provides no cited evidence of active exploitation. The stated trigger is local module loading with a specific parameter, which usually depends on local access and module-loading permissions. Treat this as a denial-of-service risk unless vendor guidance adds more scope.
Researcher notes
Evidence supports CWE-476 and availability impact from a NULL pointer dereference during module argument parsing. The source bundle does not establish confidentiality or integrity impact, remote reachability, or active exploitation. Practical validation should focus on kernel build status, module availability, and vendor backport coverage.
Mitigation direction
- Update Linux kernels using vendor packages that include the referenced stable fixes.
- Review Debian LTS advisories if running affected Debian LTS kernel packages.
- Avoid loading ib_srpt with srpt_service_guid on unpatched systems.
- Restrict kernel module loading to trusted administrators only.
- Disable or remove unused RDMA SRP target functionality where operationally safe.
Validation and detection
- Inventory Linux hosts using RDMA or the ib_srpt kernel module.
- Compare running kernel packages against vendor advisories and stable fix commits.
- Check boot and kernel logs for ib_srpt-related NULL dereference crashes.
- Confirm module-loading permissions are limited to trusted administrative paths.
Public sources used
- CVE Program
- CVE List V5
- Linux stable commit 84f1dac
- Linux stable commit e0055d6
- Linux stable commit 5a5c039
- Linux stable commit 989af2f
- Linux stable commit aee4dcf
- Linux stable commit fe2a73d
- Linux stable commit c99a827
- Linux stable commit fdfa083
- Debian LTS advisory June 2024 00017
- Debian LTS advisory June 2024 00020
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-476: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2024-26744 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H1.83.6CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
5.5MediumVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/84f1dac960cfa210a3b7a7522e6c2320ae91932bCVE reference, Linux
- https://git.kernel.org/stable/c/e0055d6461b36bfc25a9d2ab974eef78d36a6738CVE reference, Linux
- https://git.kernel.org/stable/c/5a5c039dac1b1b7ba3e91c791f4421052bf79b82CVE reference, Linux
- https://git.kernel.org/stable/c/989af2f29342a9a7c7515523d879b698ac8465f4CVE reference, Linux
- https://git.kernel.org/stable/c/aee4dcfe17219fe60f2821923adea98549060af8CVE reference, Linux
- https://git.kernel.org/stable/c/fe2a73d57319feab4b3b175945671ce43492172fCVE reference, Linux
- https://git.kernel.org/stable/c/c99a827d3cff9f84e1cb997b7cc6386d107aa74dCVE reference, Linux
- https://git.kernel.org/stable/c/fdfa083549de5d50ebf7f6811f33757781e838c0CVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlCVE reference, CVE · x_transferred
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlCVE reference, CVE · x_transferred
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
NULL Pointer Dereference
NULL Pointer Dereference represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.