CVE-2024-26783
MEDIUM 5.5 ALL-YEARSIn the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index With numa balancing on, when a numa system is running where a numa node doesn't have its local memory so it has no managed zones, the following oops has been observed. It's because wakeup_kswapd() is called with a wrong zone index, -1. Fixed it by checking the index before calling wakeup_kswapd(). > BUG: unable to handle page fault for address: 00000000000033f3 > #PF: supervisor read access in kernel mode > #PF: error_code(0x0000) - not-present page > PGD 0 P4D 0 > Oops: 0000 [#1] PREEMPT SMP NOPTI > CPU: 2 PID: 895 Comm: masim Not tainted 6.6.0-dirty #255 > Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS > rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 > RIP: 0010:wakeup_kswapd (./linux/mm/vmscan.c:7812) > Code: (omitted) > RSP: 0000:ffffc90004257d58 EFLAGS: 00010286 > RAX: ffffffffffffffff RBX: ffff88883fff0480 RCX: 0000000000000003 > RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88883fff0480 > RBP: ffffffffffffffff R08: ff0003ffffffffff R09: ffffffffffffffff > R10: ffff888106c95540 R11: 0000000055555554 R12: 0000000000000003 > R13: 0000000000000000 R14: 0000000000000000 R15: ffff88883fff0940 > FS: 00007fc4b8124740(0000) GS:ffff888827c00000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 00000000000033f3 CR3: 000000026cc08004 CR4: 0000000000770ee0 > DR0: 000000000
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 15th percentile
Impact if exploited
5.5CVSS 3.1 · MEDIUM · NVD
- ConfidentialityNone
- IntegrityNone
- AvailabilityHigh
What an attacker needs
- ⚠Access: Requires local access to the host
- ⚠Privileges: Requires a low-privilege account
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Affected
Products Linux Simatic S7 1500 Cpu 1518 4 Pn/Dp Mfp Simatic S7 1500 Cpu 1518f 4 Pn/Dp Mfp Siplus S7 1500 Cpu 1518 4 Pn/Dp Mfp Linux Kernel
Weakness (CWE)
Not classified.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References and research data (JSON)
Vendor product assessments
Showing 32 of 1474 vendor product statements; 1442 omitted. Read the full vendor advisory.
bpftool-0:7.0.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
python3-perf-debuginfo-0:5.14.0-284.73.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_2?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-tools-debuginfo-0:5.14.0-427.26.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-modules-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-debuginfo-common-s390x-0:5.14.0-427.26.1.el9_4.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-debug-0:5.14.0-284.73.1.el9_2.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.2) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_2?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-64k-modules-extra-0:5.14.0-427.26.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
python3-perf-0:5.14.0-427.26.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-rt-0:5.14.0-427.26.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-debug-0:5.14.0-427.26.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux RT (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
rv-0:5.14.0-427.26.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux RT (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- no fix planned: Out of support scope
kernel-doc as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-doc
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- no fix planned: Out of support scope
python-perf as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/python-perf
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- no fix planned: Out of support scope
kernel-debug-devel as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug-devel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- no fix planned: Out of support scope
kernel-rt as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- no fix planned: Out of support scope
kernel-rt-trace as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-trace
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- no fix planned: Out of support scope
kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-tools-libs-devel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- no fix planned: Out of support scope
kernel-rt-debug as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- none available: Affected
kernel-rt-debug-modules-core as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-modules-core
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- none available: Affected
kernel-rt-modules as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-modules
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- none available: Affected
kernel-rt.src as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- none available: Affected
kernel-cross-headers-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2) · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/[email protected]_2?arch=aarch64
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-headers-0:5.14.0-427.26.1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/[email protected]_4?arch=ppc64le
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-headers-0:5.14.0-284.73.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2) · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/[email protected]_2?arch=x86_64
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-headers-0:5.14.0-284.73.1.el9_2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2) · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/[email protected]_2?arch=aarch64
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-headers-0:5.14.0-427.26.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 9) · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/[email protected]_4?arch=x86_64
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-cross-headers as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-cross-headers
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-modules as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-modules
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-debug-modules-extra
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
kernel-tools-libs as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-tools-libs
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
python3-perf as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/python3-perf
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Linux | Linux Kernel | ≥ 5.18 and < 6.6.22 |
| Linux | Linux Kernel | ≥ 6.7 and < 6.7.9 |
| Linux | Linux Kernel | 6.8 |
| Linux | Linux Kernel | 6.8 |
| Linux | Linux Kernel | 6.8 |
| Linux | Linux Kernel | 6.8 |
| Linux | Linux Kernel | 6.8 |
| Linux | Linux Kernel | 6.8 |
References
Patches & mitigations
- https://git.kernel.org/stable/c/d6159bd4c00594249e305bfe02304c67c506264e CVE record · Linux · Updated 2026-05-11T20:04:06.074Z
CVE record · CVE · Updated 2025-11-03T19:29:34.540Z
NVD · CVE-2024-26783 · Updated 2026-10-15T01:17:23.427 - https://git.kernel.org/stable/c/bdd21eed8b72f9e28d6c279f6db258e090c79080 CVE record · Linux · Updated 2026-05-11T20:04:06.074Z
CVE record · CVE · Updated 2025-11-03T19:29:34.540Z
NVD · CVE-2024-26783 · Updated 2026-10-15T01:17:23.427 - https://git.kernel.org/stable/c/2774f256e7c0219e2b0a0894af1c76bdabc4f974 CVE record · Linux · Updated 2026-05-11T20:04:06.074Z
CVE record · CVE · Updated 2025-11-03T19:29:34.540Z
NVD · CVE-2024-26783 · Updated 2026-10-15T01:17:23.427
Advisories
- https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26783.json Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24045 EUVD · EUVD-2024-24045
Technical & other
- https://git.kernel.org/stable/c/e5ec1c24e71dbf144677a975d6ba91043c2193dbCVE record · Linux · Updated 2026-05-11T20:04:06.074Z
NVD · CVE-2024-26783 · Updated 2026-10-15T01:17:23.427 - https://lists.debian.org/debian-lts-announce/2025/08/msg00010.htmlCVE record · CVE · Updated 2025-11-03T19:29:34.540Z
NVD · CVE-2024-26783 · Updated 2026-10-15T01:17:23.427 - https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlCVE record · siemens-SADP · Updated 2026-10-15T00:38:34.383Z
NVD · CVE-2024-26783 · Updated 2026-10-15T01:17:23.427 - https://cert-portal.siemens.com/productcert/html/ssa-457936.htmlCVE record · siemens-SADP · Updated 2026-10-15T00:38:34.383Z
NVD · CVE-2024-26783 · Updated 2026-10-15T01:17:23.427 - https://access.redhat.com/security/cve/CVE-2024-26783 Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2273466 Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
- https://www.cve.org/CVERecord?id=CVE-2024-26783 Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2024-26783 Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
- https://lore.kernel.org/linux-cve-announce/2024040458-CVE-2024-26783-68c8@gregkh/T Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
- https://access.redhat.com/errata/RHSA-2024:4533 Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
- https://access.redhat.com/errata/RHSA-2024:4583 Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
- https://access.redhat.com/errata/RHSA-2024:4554 Red Hat · CVE-2024-26783 · Updated 2025-11-21T13:41:20+00:00
Sources: NVD · CVE.org · All sources and attribution · EPSS