Critical 9.8Published Jun 21, 2024

CVE-2024-36288SUNRPC: Fix loop termination condition in gss_free_in_token_pages()

Updated under an hour ago (Oct 26, 2026, 4:23 PM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() The in_token->pages[] array is not NULL terminated. This results in the following KASAN splat: KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f]

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ab8466d4e26806a4ae82c282762c4545eecf45ef before 57ff6c0a175930856213b2aa39f8c845a53e5b1c; 4420b73c7f26fd5fcb37bbce5313dd356ef1b3ca builds before 6ed45d20d30005bed94c8c527ce51d5ad8121018; from f148a95f68c66c1b097391b68e153d5a46f0e780 before 4cefcd0af7458bdeff56a9d8dfc6868ce23d128a; from fe0b474974fee7af1df286e0edd5a1460c811865 before b4878ea99f2b40ef1925720b1b4ca7f4af1ba785; from c1d8c429e4d2ce85ec5c92cf71cb419baf75c56f before af628d43a822b78ad8d4a58d8259f8bf8bc71115; 8ca148915670a2921afcc255af9e1dc80f37b052 builds before 0a1cb0c6102bb4fd310243588d39461da49497ad; from bafa6b4d95d97877baa61883ff90f7e374427fae before 4a77c3dead97339478c7422eb07bf4bf63577008; a3c1afd5d7ad59e34a275d80c428952f83c8c1f0; and 1 more ranges	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	before 6.9.4; 6.10.0	NVD

References

References

https://git.kernel.org/stable/c/57ff6c0a175930856213b2aa39f8c845a53e5b1c	mailing-list, patch
https://git.kernel.org/stable/c/6ed45d20d30005bed94c8c527ce51d5ad8121018	mailing-list, patch
https://git.kernel.org/stable/c/4cefcd0af7458bdeff56a9d8dfc6868ce23d128a	mailing-list, patch
https://git.kernel.org/stable/c/b4878ea99f2b40ef1925720b1b4ca7f4af1ba785	mailing-list, patch
https://git.kernel.org/stable/c/af628d43a822b78ad8d4a58d8259f8bf8bc71115	mailing-list, patch
https://git.kernel.org/stable/c/0a1cb0c6102bb4fd310243588d39461da49497ad	mailing-list, patch
https://git.kernel.org/stable/c/4a77c3dead97339478c7422eb07bf4bf63577008	mailing-list, patch
https://git.kernel.org/stable/c/f9977e4e0cd98a5f06f2492b4f3547db58deabf5	mailing-list, patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.