CYBER CODE RED

Get real-time updates on Telegram

P5Verified

CVE-2024-26859: linux kernel from 4.2 (inclusive), before 4.19.311 (exclusive), from 4.20 (inclusive), before 5.4.273 (exclusive)…

CVE-2024-26859. CVSS 3.1 base score 4.7 (MEDIUM, NVD). EPSS 0.00182 (percentile 0.07251), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.2 (inclusive), before 4.19.311 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.273 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.214 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.153 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.11 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.2 (exclusive)
linux

debian linux · 10.0
debian

Linux · 4cace675d687ebd2d813e90af80ff87ee85202f9 to before 7bcc090c81116c66936a7415f2c6b1483a4bcfd9, 4cace675d687ebd2d813e90af80ff87ee85202f9 to before 4f37d3a7e004bbf560c21441ca9c022168017ec4, 4cace675d687ebd2d813e90af80ff87ee85202f9 to before 8eebff95ce9558be66a36aa7cfb43223f3ab4699, 4cace675d687ebd2d813e90af80ff87ee85202f9 to before 8ffcd3ccdbda0c918c4a0f922ef1c17010f1b598, 4cace675d687ebd2d813e90af80ff87ee85202f9 to before cf7d8cba639ae792a42c2a137b495eac262ac36c, 4cace675d687ebd2d813e90af80ff87ee85202f9 to before 3a9f78b297e08ca8e88ae3ecff1f6fe2766dc5eb, 4cace675d687ebd2d813e90af80ff87ee85202f9 to before c51f8b6930db3f259b8820b589f2459d2df3fc68, 4cace675d687ebd2d813e90af80ff87ee85202f9 to before 44f9f1abb0ecc43023225ab9539167facbabf0ec, 4cace675d687ebd2d813e90af80ff87ee85202f9 to before d27e2da94a42655861ca4baea30c8cd65546f25d
Linux

Linux · 4.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-362
CCR priority
18.8 /100 (P5)
CVSS 3.1
4.7 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00182 · percentile 0.07251 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-26859.html