---
id: CVE-2024-26795
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  riscv: Sparse-Memory/vmemmap out-of-bounds fix

  Offset vmemmap so that the first page of vmemmap will be mapped
  to the first page of physical memory in order to ensure …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  riscv: Sparse-Memory/vmemmap out-of-bounds fix

  Offset vmemmap so that the first page of vmemmap will be mapped
  to the first page of physical memory in order to ensure …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.4, < 5.10.212'
  - 'linux_kernel >= 5.11, < 5.15.151'
  - 'linux_kernel >= 5.16, < 6.1.81'
  - 'linux_kernel >= 6.2, < 6.6.21'
  - 'linux_kernel >= 6.7, < 6.7.9'
  - linux_kernel = 6.8
  - debian_linux = 10.0
patched:
  - linux_kernel 6.7.9
published: '2024-04-04'
updated: '2026-08-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26795'
references:
  - url: 'https://git.kernel.org/stable/c/2a1728c15ec4f45ed9248ae22f626541c179bfbe'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5941a90c55d3bfba732b32208d58d997600b44ef'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8310080799b40fd9f2a8b808c657269678c149af'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a11dd49dcb9376776193e15641f84fcc1e5980c9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a278d5c60f21aa15d540abb2f2da6e6d795c3e6e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2a1728c15ec4f45ed9248ae22f626541c179bfbe'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/5941a90c55d3bfba732b32208d58d997600b44ef'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/8310080799b40fd9f2a8b808c657269678c149af'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/8af1c121b0102041809bc137ec600d1865eaeedd'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/a11dd49dcb9376776193e15641f84fcc1e5980c9'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/a278d5c60f21aa15d540abb2f2da6e6d795c3e6e'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00237
epssPercentile: 0.15021
ingestedAt: '2026-08-05T10:46:49.060Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

riscv: Sparse-Memory/vmemmap out-of-bounds fix

Offset vmemmap so that the first page of vmemmap will be mapped
to the first page of physical memory in order to ensure that
vmemmap’s bounds will be respected during
pfn_to_page()/page_to_pfn() operations.
The conversion macros will produce correct SV39/48/57 addresses
for every possible/valid DRAM_BASE inside the physical memory limits.

v2:Address Alex's comments

## Affected

- `linux_kernel >= 5.4, < 5.10.212`
- `linux_kernel >= 5.11, < 5.15.151`
- `linux_kernel >= 5.16, < 6.1.81`
- `linux_kernel >= 6.2, < 6.6.21`
- `linux_kernel >= 6.7, < 6.7.9`
- `linux_kernel = 6.8`
- `debian_linux = 10.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.7.9`