What is the GHSA ID for CVE-2024-26581?

GitHub tracks CVE-2024-26581 as GHSA-92f7-c7hw-58cr.

What is the CVSS score of CVE-2024-26581?

CVE-2024-26581 has a CVSS 3.1 base score of 7.8 (High), vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Which versions are affected by CVE-2024-26581?

Kernel (Linux): = 5.5.0, = 5.11.0, = 5.16.0, = 6.2.0, = 6.5.0, < 6.7.5.

How do I fix CVE-2024-26581?

Upgrade to 5.4.269, 5.10.210, 5.15.149, 6.1.78, 6.6.17 or 6.7.5, depending on the release line. The fix is in commits 10e9cb3, 1296c11 and 2bab493.

Is CVE-2024-26581 exploited in the wild?

CISA's Known Exploited Vulnerabilities catalog doesn't list CVE-2024-26581. That means no confirmed exploitation has been catalogued, not that it is safe to leave unpatched. CISA's SSVC assessment rates exploitation as "none". EPSS estimates a 2.22% chance of exploitation in the next 30 days, higher than 81% of CVEs.

CVE-2024-26581GHSA-92f7-c7hw-58cr

netfilter: nft_set_rbtree: skip end interval element from gc

Q: How do I fix CVE-2024-26581?

Upgrade to 5.4.269, 5.10.210, 5.15.149, 6.1.78, 6.6.17 or 6.7.5, depending on the release line. The fix is in commits 10e9cb3, 1296c11 and 2bab493.

Q: Is CVE-2024-26581 exploited in the wild?

CISA's Known Exploited Vulnerabilities catalog doesn't list CVE-2024-26581. That means no confirmed exploitation has been catalogued, not that it is safe to leave unpatched. CISA's SSVC assessment rates exploitation as "none". EPSS estimates a 2.22% chance of exploitation in the next 30 days, higher than 81% of CVEs.

CVE-2024-26581 (GitHub advisory GHSA-92f7-c7hw-58cr) is a high-severity vulnerability with a CVSS 3.1 base score of 7.8, classed as Use After Free (CWE-416), in Kernel (Linux). Affected versions: < 5.4.269; >= 5.5.0, < 5.10.210; >= 5.11.0, < 5.15.149; >= 5.16.0, < 6.1.78; >= 6.2.0, < 6.6.17; >= 6.5.0, < 6.7.5. It is fixed in 5.4.269, 5.10.210, 5.15.149, 6.1.78, 6.6.17 or 6.7.5, depending on the release line.

High7.8Fix availableUnreviewed advisory

Published 20 Feb 2024Updated 5 Aug 2026

7.8HighCVSS 3.1

CVE ID: CVE-2024-26581
GHSA ID: GHSA-92f7-c7hw-58cr
EPSS: 2.22%higher than 81% of CVEs
Weakness (CWE): CWE-416Use After Free
KEV status: Not in KEV
Published: 20 Feb 2024
Updated: 5 Aug 2026
Ecosystem: Linux
Assigned by (CNA): Linux

Summary

Source: GitHub Advisory Database

netfilter: nft_set_rbtree: skip end interval element from gc

rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.

Technical details

Source: GitHub Advisory Database

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

High7.8Base score from GitHub Advisory Database

Attack Vector AV: Local
Attack Complexity AC: Low
Privileges Required PR: Low
User Interaction UI: None
Scope S: Unchanged
Confidentiality C: High
Integrity I: High
Availability A: High

CISA SSVC decision points

Exploitation: none; No public exploitation evidence
Automatable: no; Needs manual steps per target
Technical impact: total; Full control of the affected system

CISA Coordinator assessment (SSVC 2.0.3) via CVE.org.

Affected packages

Source: OSV (CVE record)

Kernel
Linux
No PURL published
Affected versions
< 5.4.269
>= 5.5.0, < 5.10.210
>= 5.11.0, < 5.15.149
>= 5.16.0, < 6.1.78
>= 6.2.0, < 6.6.17
>= 6.5.0, < 6.7.5
Fixed in
5.4.269
5.10.210
5.15.149
6.1.78
6.6.17
6.7.5

Package	Affected versions	Fixed in
Kernel Linux No PURL published	< 5.4.269 >= 5.5.0, < 5.10.210 >= 5.11.0, < 5.15.149 >= 5.16.0, < 6.1.78 >= 6.2.0, < 6.6.17 >= 6.5.0, < 6.7.5	5.4.269 5.10.210 5.15.149 6.1.78 6.6.17 6.7.5

Fix

Source: OSV (CVE record)

Fix available

Upgrade to 5.4.269, 5.10.210, 5.15.149, 6.1.78, 6.6.17 or 6.7.5, depending on your release line.

Patch commits

10e9cb3Patch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux
1296c11Patch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux
2bab493Patch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux
4cee42fPatch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux
60c0c23Patch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux
6eb1444Patch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux
b734f7aPatch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux
c60d252Patch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux

Vulnerability intelligence

References

Fixes 12

Advisories 3

Package 1

git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Questions about CVE-2024-26581

What is the GHSA ID for CVE-2024-26581?: GitHub tracks CVE-2024-26581 as GHSA-92f7-c7hw-58cr.
What is the CVSS score of CVE-2024-26581?: CVE-2024-26581 has a CVSS 3.1 base score of 7.8 (High), vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Which versions are affected by CVE-2024-26581?: Kernel (Linux): < 5.4.269; >= 5.5.0, < 5.10.210; >= 5.11.0, < 5.15.149; >= 5.16.0, < 6.1.78; >= 6.2.0, < 6.6.17; >= 6.5.0, < 6.7.5.
How do I fix CVE-2024-26581?: Upgrade to 5.4.269, 5.10.210, 5.15.149, 6.1.78, 6.6.17 or 6.7.5, depending on the release line. The fix is in commits 10e9cb3, 1296c11 and 2bab493.
Is CVE-2024-26581 exploited in the wild?: CISA's Known Exploited Vulnerabilities catalog doesn't list CVE-2024-26581. That means no confirmed exploitation has been catalogued, not that it is safe to leave unpatched. CISA's SSVC assessment rates exploitation as "none". EPSS estimates a 2.22% chance of exploitation in the next 30 days, higher than 81% of CVEs.

Data sources

Upstream records

OSV (GitHub advisory)No record
GitHub Advisory DatabaseLoadedRaw JSON
OSV (CVE record)LoadedRaw JSON
CVE.orgLoaded
CISA KEV catalogLoaded

Fetched 1 day ago (14 Oct 2026, 00:28 UTC). Records refresh automatically after 24 hours.

Where each part of this page came from

Title and description: GitHub Advisory Database
Severity score: GitHub Advisory Database
Weakness (CWE): GitHub Advisory Database
Affected packages: OSV (CVE record)
Fix: OSV (CVE record)
References: Computed by CVEminer
SSVC: CVE.org
KEV status: CISA KEV catalog
EPSS: GitHub Advisory Database

OSV and GitHub Advisory Database content is licensed CC BY 4.0. Values marked as computed or derived were calculated by CVEminer from the upstream data.