High 7.8Published May 1, 2024

CVE-2024-26988init/main.c: Fix potential static_command_line memory overflow

Updated under an hour ago (Oct 27, 2026, 10:40 PM ET)

Does this affect you?

It affects Linux and 7 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential static_command_line memory overflow We allocate memory of size 'xlen + strlen(boot_command_line) + 1' for static_command_line, but the strings copied into static_command_line are extra_command_line and command_line, rather than extra_command_line and boot_command_line. When strlen(command_line) > strlen(boot_command_line), static_command_line will overflow. This patch just recovers strlen(command_line) which was miss-consolidated with strlen(boot_command_line) in the commit f5c7310ac73e ("init/main: add checks for the return value of memblock_alloc*()")

CVSS: 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 before 2ef607ea103616aec0289f1b65d103d499fa903a; from f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 before 0dc727a4e05400205358a22c3d01ccad2c8e1fe4; from f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 before 76c2f4d426a5358fced5d5990744d46f10a4ccea; from f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 before 81cf85ae4f2dd5fa3e43021782aa72c4c85558e8; from f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 before 936a02b5a9630c5beb0353c3085cc49d86c57034; from f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 before 46dad3c1e57897ab9228332f03e1c14798d2d3b9	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.1 before 5.10.216; from 5.11 before 5.15.157; from 5.16 before 6.1.88; from 6.2 before 6.6.29; from 6.7 before 6.8.8; 6.9; 6.9; 6.9; and 1 more ranges	NVD
debian debian_linux debian:debian_linux	10.0	NVD
fedoraproject fedora fedoraproject:fedora	38; 39; 40	NVD

References

References

https://git.kernel.org/stable/c/2ef607ea103616aec0289f1b65d103d499fa903a	patch
https://git.kernel.org/stable/c/0dc727a4e05400205358a22c3d01ccad2c8e1fe4	patch
https://git.kernel.org/stable/c/76c2f4d426a5358fced5d5990744d46f10a4ccea	patch
https://git.kernel.org/stable/c/81cf85ae4f2dd5fa3e43021782aa72c4c85558e8	patch
https://git.kernel.org/stable/c/936a02b5a9630c5beb0353c3085cc49d86c57034	patch
https://git.kernel.org/stable/c/46dad3c1e57897ab9228332f03e1c14798d2d3b9	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	mailing-list, third-party-advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/	mailing-list, third-party-advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/	mailing-list, third-party-advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/	mailing-list, third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.