LiveActive security incident?Get immediate response
CVE Record

CVE-2024-26994: speakup: Avoid crash on very long word

In the Linux kernel, the following vulnerability has been resolved: speakup: Avoid crash on very long word In case a console is set up really large and contains a really long word (> 256 characters), we have to stop before the length of the word buffer.

HighCVSS 7.8Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysishigh

Security readout for executives and security teams

Plain-English summary

A Linux computer using the Speakup console accessibility component may crash when it encounters a single word longer than 256 characters on an unusually large console. This can disrupt service and, according to the supplied CVSS assessment, may have broader system impact. The issue is not described as remotely reachable.

Executive priority

Treat this as high-priority kernel maintenance, especially for shared Linux systems with Speakup enabled and untrusted local users. The supplied evidence does not indicate an internet-wide emergency or active exploitation, but the kernel-level crash and 7.8 score justify timely remediation during the next expedited maintenance window.

Technical view

Speakup’s console text handling could exceed its 256-character word buffer when a very large console contained a longer uninterrupted word. The upstream fix stops processing at the buffer limit. The supplied CVSS 3.1 score is 7.8: local access, low complexity, low privileges, no user interaction, and high confidentiality, integrity, and availability impacts.

Likely exposure

Exposure is most likely on Linux hosts where Speakup processes an unusually large console containing uninterrupted text longer than 256 characters. The CVSS vector indicates that an attacker requires local, low-privileged access. Systems not using Speakup are less likely to reach the vulnerable path, but their kernel package status should still be verified.

Exploitation context

The supplied record marks this CVE as absent from KEV, and no cited source reports active exploitation. The evidence supports a locally reachable crash condition, but it does not establish a public exploit, remote attack path, arbitrary code execution, or observed attacks.

Researcher notes

The CVE description confirms a buffer-length-related crash and its boundary fix. No CWE, proof of concept, exploit chain, or demonstrated code execution is supplied. The affected-version data is not sufficiently structured here to derive exact vulnerable ranges safely; validate each distribution package or custom kernel against the CVE record, vendor advisories, and stable commits.

Mitigation direction

  • Apply a supported Linux distribution kernel update that addresses CVE-2024-26994.
  • Confirm the updated kernel contains the applicable upstream Speakup fix.
  • Reboot affected systems into the updated kernel following normal change controls.
  • If patching is delayed, consult vendor guidance; the supplied sources provide no confirmed workaround.

Validation and detection

  • Inventory running kernel versions and compare them with applicable distribution advisories.
  • Determine whether Speakup is enabled, loaded, or included in custom kernel configurations.
  • Verify custom kernel provenance includes the applicable stable fix commit.
  • After updating, confirm systems are running the intended patched kernel.
  • Review kernel logs for prior Speakup-related crashes without deliberately triggering the condition.
Prepared
Confidence
medium
Sources
12

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2024-26994 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
High
CVSS
7.8 (3.1)
Known Exploited
No
Published

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

2CVSS vectors
3Timeline events
2ADP providers
14Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

CVSS vector scores

2 official scores

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
7.8CVSS 3.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9Linux
5.9CVSS 3.1MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L2.53.4CISA-ADP

Vulnerability scoring details

Base CVSS 3.1 score

7.8High
CVSS 3.1 vector shape for CVE-2024-26994Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CISA-ADPCISA ADP Vulnrichment
cvssV3_1other:ssvc
CVECVE Program Container

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinuxc6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42unaffected
LinuxLinux2.6.37, 0, 4.19.313, 5.4.275, 5.10.216, 5.15.157, 6.1.88, 6.6.29, 6.8.8, 6.9affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.