HighFix available
wireguard: netlink: access device through ctx instead of peer
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.215, 5.15.154, 6.1.84, 6.6.24, 6.7.12, 6.8.3
- CVEs
- CVE-2024-26950
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 8 Nov 2026, 01:52 UTC · Revision 1
Source evidence
wireguard: netlink: access device through ctx instead of peer
core-osv · Original sourcePublished 1 May 2024, 05:18 UTC
In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
osv:CVE-2024-26950
Kernel
Fixed versions: 5.10.215, 5.15.154, 6.1.84, 6.6.24, 6.7.12, 6.8.3
Complete source record
{
"id": "ed9f6c22f0a0e33620fcb5a6a6cf866998655203d429aeca81b9dcf905be396e",
"url": "https://osv.dev/vulnerability/CVE-2024-26950",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "wireguard: netlink: access device through ctx instead of peer",
"summary": "In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.",
"evidence": "osv:CVE-2024-26950",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.215",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.154",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.84",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.24",
"evidence": "/affected/1/ranges"
},
{
"value": "6.7.12",
"evidence": "/affected/1/ranges"
},
{
"value": "6.8.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2024-26950",
"aliases": [
"CVE-2024-26950"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "e7096c131e5161fa3b8e52a650d7719d2857adfd"
},
{
"fixed": "493aa6bdcffd90a4f82aa614fe4f4db0641b4068"
},
{
"fixed": "4be453271a882c8ebc28df3dbf9e4d95e6ac42f5"
},
{
"fixed": "09c3fa70f65175861ca948cb2f0f791e666c90e5"
},
{
"fixed": "c991567e6c638079304cc15dff28748e4a3c4a37"
},
{
"fixed": "93bcc1752c69bb309f4d8cfaf960ef1faeb34996"
},
{
"fixed": "d44bd323d8bb8031eef4bdc44547925998a11e47"
},
{
"fixed": "71cbd32e3db82ea4a74e3ef9aeeaa6971969c86f"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26950.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.6.0"
},
{
"fixed": "5.10.215"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.154"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.84"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.24"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.7.12"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.8.0"
},
{
"fixed": "6.8.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26950.json"
}
}
],
"modified": "2026-10-28T02:30:52.983572979Z",
"provider": "osv",
"references": [
"https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
"https://git.kernel.org/stable/c/09c3fa70f65175861ca948cb2f0f791e666c90e5",
"https://git.kernel.org/stable/c/493aa6bdcffd90a4f82aa614fe4f4db0641b4068",
"https://git.kernel.org/stable/c/4be453271a882c8ebc28df3dbf9e4d95e6ac42f5",
"https://git.kernel.org/stable/c/71cbd32e3db82ea4a74e3ef9aeeaa6971969c86f",
"https://git.kernel.org/stable/c/93bcc1752c69bb309f4d8cfaf960ef1faeb34996",
"https://git.kernel.org/stable/c/c991567e6c638079304cc15dff28748e4a3c4a37",
"https://git.kernel.org/stable/c/d44bd323d8bb8031eef4bdc44547925998a11e47",
"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26950.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-26950",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26950.json"
}
},
"related_cves": [
{
"value": "CVE-2024-26950",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 521524,
"published_at": "2024-05-01T05:18:29.902+00:00"
}