CVE-2024-26902

medium

In the Linux kernel, the following vulnerability has been resolved: perf: RISCV: Fix panic on pmu overflow handler (1 ] riscv_pmu_ctr_get_width_mask+0x8/0x62…

Vendor / product: Linux — linux kernel

In the Linux kernel, the following vulnerability has been resolved: perf: RISCV: Fix panic on pmu overflow handler (1 ] riscv_pmu_ctr_get_width_mask+0x8/0x62 [ 273.441169] [] handle_percpu_devid_irq+0x98/0x1ee [ 273.447562] [] generic_handle_domain_irq+0x28/0x36 [ 273.454151] [] riscv_intc_irq+0x36/0x4e [ 273.459659] [] handle_riscv_irq+0x4a/0x74 [ 273.465442] [] do_irq+0x62/0x92 [ 273.470360] Code: 0420 60a2 6402 5529 0141 8082 0013 0000 0013 0000 (6d5c) b783 [ 273.477921] ---[ end trace 0000000000000000 ]--- [ 273.482630] Kernel panic - not syncing: Fatal exception in interrupt

CVSS

5.5

5.5 (CVSS v3.1)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2024-04-17 11:15

Modified: 2026-10-30 13:17

NVD status: Modified

Last synced 3 days ago

Verified against the source API 2026-10-30 13:38 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

linux / linux_kernel <6.6.23, ≥6.7 <6.7.11

Weakness classification (CWE)

CWE-476

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://git.kernel.org/stable/c/34b567868777e9fd39ec5333969728a7f0cf179c

Patch / mitigation: https://git.kernel.org/stable/c/3ede8e94de6b834b48b0643385e66363e7a04be9

Patch / mitigation: https://git.kernel.org/stable/c/9f599ba3b9cc4bdb8ec1e3f0feddd41bf9d296d6

Patch / mitigation: https://git.kernel.org/stable/c/34b567868777e9fd39ec5333969728a7f0cf179c

Patch / mitigation: https://git.kernel.org/stable/c/3ede8e94de6b834b48b0643385e66363e7a04be9

Patch / mitigation: https://git.kernel.org/stable/c/9f599ba3b9cc4bdb8ec1e3f0feddd41bf9d296d6

References

https://git.kernel.org/stable/c/34b567868777e9fd39ec5333969728a7f0cf179c 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3ede8e94de6b834b48b0643385e66363e7a04be9 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9f599ba3b9cc4bdb8ec1e3f0feddd41bf9d296d6 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/dbf3b0ed79abeb552df4f0d8a6d84cee48b5ee77 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/34b567868777e9fd39ec5333969728a7f0cf179c af854a3a-2127-422b-91ae-364da2661108
https://git.kernel.org/stable/c/3ede8e94de6b834b48b0643385e66363e7a04be9 af854a3a-2127-422b-91ae-364da2661108
https://git.kernel.org/stable/c/9f599ba3b9cc4bdb8ec1e3f0feddd41bf9d296d6 af854a3a-2127-422b-91ae-364da2661108

Data sources

NVD CVE API 2.0 — fetched 2026-10-30 13:38 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2024-26902

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs