CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-26925: linux kernel 6.5; +27 more affected products

CVE-2024-26925. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00267 (percentile 0.17484), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.19.316 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.262 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.10.198 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.15.134 (inclusive), before 5.15.155 (exclusive)
linux

linux kernel · from 6.1.56 (inclusive), before 6.1.86 (exclusive)
linux

linux kernel · from 6.4.13 (inclusive), before 6.5 (exclusive)
linux

linux kernel · from 6.5.1 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 6.5
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

debian linux · 10.0
debian

Linux · 4b6346dc1edfb9839d6edee7360ed31a22fa6c95 to before 61ac7284346c32f9a8c8ceac56102f7914060428, 23292bdfda5f04e704a843b8f97b0eb95ace1ca6 to before 2cee2ff7f8cce12a63a0a23ffe27f08d99541494, b44a459c6561595ed7c3679599c5279204132b33 to before eb769ff4e281f751adcaf4f4445cbf30817be139, 5d319f7a81431c6bb32eb4dc7d7975f99e2c8c66 to before 8d3a58af50e46167b6f1db47adadad03c0045dae, 720344340fb9be2765bbaab7b292ece0a4570eae to before 8038ee3c3e5b59bcd78467686db5270c68544e30, 720344340fb9be2765bbaab7b292ece0a4570eae to before a34ba4bdeec0c3b629160497594908dc820110f1, 720344340fb9be2765bbaab7b292ece0a4570eae to before 0d459e2ffb541841714839e8228b845458ed3b27, f85ca36090cbb252bcbc95fc74c2853fc792694f, e07e68823116563bdbc49cef185cda6f463bc534, 5.4.262 to before 5.4.274, 5.10.198 to before 5.10.215, 5.15.134 to before 5.15.155, 6.1.56 to before 6.1.86, 4.19.316 to before 4.20, 6.4.13 to before 6.5
Linux

Linux · 6.5
Linux

RUGGEDCOM RM1224 LTE(4G) EU · 0 to before V8.2
Siemens

RUGGEDCOM RM1224 LTE(4G) NAM · 0 to before V8.2
Siemens

SCALANCE M804PB · 0 to before V8.2
Siemens

SCALANCE M812-1 ADSL-Router · 0 to before V8.2
Siemens

SCALANCE M816-1 ADSL-Router · 0 to before V8.2
Siemens

SCALANCE M826-2 SHDSL-Router · 0 to before V8.2
Siemens

SCALANCE M874-2 · 0 to before V8.2
Siemens

SCALANCE M874-3 · 0 to before V8.2
Siemens

SCALANCE M874-3 3G-Router (CN) · 0 to before V8.2
Siemens

SCALANCE M876-3 · 0 to before V8.2
Siemens

SCALANCE M876-3 (ROK) · 0 to before V8.2
Siemens

SCALANCE M876-4 · 0 to before V8.2
Siemens

SCALANCE M876-4 (EU) · 0 to before V8.2
Siemens

SCALANCE M876-4 (NAM) · 0 to before V8.2
Siemens

SCALANCE MUM853-1 (A1) · 0 to before V8.2
Siemens

SCALANCE MUM853-1 (B1) · 0 to before V8.2
Siemens

SCALANCE MUM853-1 (EU) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (A1) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (B1) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (CN) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (EU) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (RoW) · 0 to before V8.2
Siemens

SCALANCE S615 EEC LAN-Router · 0 to before V8.2
Siemens

SCALANCE S615 LAN-Router · 0 to before V8.2
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/netfilter/nf_tables_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-667
CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00267 · percentile 0.17484 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-26925.html