CVE-2024-21418

HIGH 7.8CVE-2024-21418 · Published 12/03/2024 · updated 17/06/2026

In short

CVE-2024-21418 is a HIGH (CVSS 7.8) vulnerability affecting software for open networking in the cloud (linuxfoundation).
Chance of exploitation in the next 30 days (EPSS): 0.73%, higher than 54.2% of all vulnerabilities.
Fix: update to 20181130.106, 20191130.89, 20201231.96, 20220531.26 or later.

Package	Affected versions	Patched versions
software for open networking in the cloud linuxfoundation	`≥ 201811, < 20181130.106≥ 201911, < 20191130.89≥ 202012, < 20201231.96≥ 202205, < 20220531.26`	`20181130.10620191130.8920201231.9620220531.26`

Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.