CVE-2024-10026
- Source
- https://cve.org/CVERecord?id=CVE-2024-10026
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-10026.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-10026
- Downstream
- Published
- 2025-01-30T19:12:27.994Z
- Modified
- 2026-05-15T04:08:25.551162259Z
- Severity
-
- 6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N CVSS Calculator
- Summary
- Improved Seeding and Hashing In gVisor
- Details
-
A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.
- Database specific
{ "cwe_ids": [ "CWE-328", "CWE-339" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10026.json", "cna_assigner": "Google" }- References
-
- https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10026.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-10026
- https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2
- https://github.com/google/gvisor/commit/e54bfde79278cafadedbf73c68ee10cb5982f2af
- https://github.com/google/gvisor/commit/f956b5ac17ae1f60a4d21999b59ba18c55f86d56
- https://github.com/google/gvisor