Medium 5.5Published Mar 27, 2024

CVE-2024-26651sr9800: Add check for usbnet_get_endpoints

Updated under an hour ago (Oct 27, 2026, 11:50 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnet_get_endpoints Add check for usbnet_get_endpoints() and return the error if it fails in order to transfer the error.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before 424eba06ed405d557077339edb19ce0ebe39e7c7; 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 builds before 8a8b6a24684bc278036c3f159f7b3a31ad89546a; 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 builds before 6b4a39acafaf0186ed8e97c16e0aa6fca0e52009; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before 276873ae26c8d75b00747c1dadb9561d6ef20581; 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 builds before 9c402819620a842cbfe39359a3ddfaac9adc8384; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before e39a3a14eafcf17f03c037290b78c8f483529028; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before efba65777f98457773c5b65e3135c6132d3b015f; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80 before f546cc19f9b82975238d0ba413adc27714750774; and 1 more ranges	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.14 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2	NVD

References

References

https://git.kernel.org/stable/c/424eba06ed405d557077339edb19ce0ebe39e7c7	patch
https://git.kernel.org/stable/c/8a8b6a24684bc278036c3f159f7b3a31ad89546a	patch
https://git.kernel.org/stable/c/6b4a39acafaf0186ed8e97c16e0aa6fca0e52009	patch
https://git.kernel.org/stable/c/276873ae26c8d75b00747c1dadb9561d6ef20581	patch
https://git.kernel.org/stable/c/9c402819620a842cbfe39359a3ddfaac9adc8384	patch
https://git.kernel.org/stable/c/e39a3a14eafcf17f03c037290b78c8f483529028	patch
https://git.kernel.org/stable/c/efba65777f98457773c5b65e3135c6132d3b015f	patch
https://git.kernel.org/stable/c/f546cc19f9b82975238d0ba413adc27714750774	patch
https://git.kernel.org/stable/c/07161b2416f740a2cb87faa5566873f401440a61	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	mailing-list
1–10 of 14

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.