Get real-time updates on Telegram
CVE-2024-26772: linux kernel before 4.19.308 (exclusive), from 4.20 (inclusive), before 5.4.270 (exclusive), from 5.5 (inclusive)…
CVE-2024-26772. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00266 (percentile 0.17138), scored 13-Oct-2026.
Affected technology
linux kernel · before 4.19.308 (exclusive)
linux
linux kernel · from 4.20 (inclusive), before 5.4.270 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.211 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.150 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.80 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.19 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.7.7 (exclusive)
linux
linux kernel · 6.8 · update rc1
linux
linux kernel · 6.8 · update rc2
linux
debian linux · 10.0
debian
Linux · 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 5a6dcc4ad0f7f7fa8e8d127b5526e7c5f2d38a43, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 6b92b1bc16d691c95b152c6dbf027ad64315668d, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before ffeb72a80a82aba59a6774b0611f792e0ed3b0b7, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 8de8305a25bfda607fc13475ebe84b978c96d7ff, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before d639102f4cbd4cb65d1225dba3b9265596aab586, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before d3bbe77a76bc52e9d4d0a120f1509be36e25c916, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 21dbe20589c7f48e9c5d336ce6402bcebfa6d76a, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 832698373a25950942c04a512daa652c18a9b513
Linux
Linux · 3.12
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens
Component: Not specified by the source
File: fs/ext4/mballoc.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.3 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00266 · percentile 0.17138 · 2026-10-13
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-26772.html