VulnSocial

CVE-2024-26582Exploit(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for linux linux_kernel systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.

linux CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Public PoC and exploit tooling are both present
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 2 signals
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-07-07); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
linux
Products
linux_kernel

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-07-07: 1Mentions · 2026-07-08: 1Mentions · 2026-07-09: 1PoC Mentioned / Linked · 2026-07-07: 1PoC Mentioned / Linked · 2026-07-08: 1Exploit Tool / Code · 2026-07-07: 1Technical Details · 2026-07-07: 1Technical Details · 2026-07-09: 107-0707-0807-09
Signal classification3 categories
Exploit
133.3%
PoC
133.3%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-071
Exploit1
2026-07-081
PoC1
2026-07-091
General1
Full discourse3 posts
  • Daily CyberSecurity@Daily_CyberSec
    Exploit

    A Linux kernel vulnerability (CVE-2024-26582) has a public PoC that turns a TLS use-after-free into a root shell. Details and exploit are out. #Linux #KernelSecurity #CVE202426582 #UseAfterFree #CyberSecurity http://securityonline.info/linux-kernel-cve-2024-26582-root-shell/

    Post summary

    A public PoC and functional exploit for CVE‑2024‑26582 that turns a TLS use‑after‑free into a root shell are available, but no patches or active exploitation reports are noted.

    02036122.2K
    12.9K followersView on X
  • Halil Deniz@denizhalilT
    General

    Deep technical analysis of the Linux kernel vulnerability CVE-2024-26582. Discover how a native kTLS reference counting flaw leads to Use-After-Free conditions, KASLR bypass, and full Local Privilege Escalation (LPE). https://denizhalil.com/2026/07/09/linux-kernel-vulnerability-cve-2024-26582-analysis/ #Linux #CyberSecurity #CVE https://t.co/HwCXYi5zlJ

    Post summary

    A deep technical analysis of CVE-2024-26582 exposes a kTLS reference‑counting flaw leading to UAF, KASLR bypass, and LPE, but does not provide PoC, exploit code, active exploitation claims, patches, or debunking.

    00001115
    33 followersView on X
  • キタきつね@foxbook
    PoC

    Linuxカーネルの脆弱性CVE-2024-26582：公開された概念実証（PoC）によりルートシェルに到達可能 Linux Kernel Vulnerability CVE-2024-26582: Public PoC Reaches Root Shell #DailyCyberSecurity (Jul 7) https://securityonline.info/linux-kernel-cve-2024-26582-root-shell/

    Post summary

    A public PoC for CVE-2024-26582 demonstrates a root shell; no active exploitation, patch, or detailed technical data is furnished.

    00000267
    4.9K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities