CVE-2024-26736EPSS p50.5%
CVE-2024-26736CVE-2024-26736
linux / linux_kernel
Description
In the Linux kernel, the following vulnerability has been resolved:
afs: Increase buffer size in afs_update_volume_status()
The max length of volume->vid value is 20 characters.
So increase idbuf[] size up to 24 to avoid overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[DH: Actually, it's 20 + NUL, so increase it to 24 and use snprintf()]
Scoring
| CVSS | 8.1 () |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.72% probability of exploitation · percentile 50.5% · 2026-08-05T12:04:55Z |
| Last modified | 2026-08-04 |