CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-26957: linux kernel before 4.19.312 (exclusive), from 4.20 (inclusive), before 5.4.274 (exclusive), from 5.5 (inclusive)…

CVE-2024-26957. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00241 (percentile 0.14087), scored 13-Oct-2026.

Affected technology

linux kernel · before 4.19.312 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.84 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.24 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.12 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.3 (exclusive)
linux

debian linux · 10.0
debian

Linux · e28d2af43614eb86f59812e7221735fc221bbc10 to before 7e500849fa558879a1cde43f80c7c048c2437058, e28d2af43614eb86f59812e7221735fc221bbc10 to before 9daddee03de3f231012014dab8ab2b277a116a55, e28d2af43614eb86f59812e7221735fc221bbc10 to before 6470078ab3d8f222115e11c4ec67351f3031b3dd, e28d2af43614eb86f59812e7221735fc221bbc10 to before a55677878b93e9ebc31f66d0e2fb93be5e7836a6, e28d2af43614eb86f59812e7221735fc221bbc10 to before b7f6c3630eb3f103115ab0d7613588064f665d0d, e28d2af43614eb86f59812e7221735fc221bbc10 to before a64ab862e84e3e698cd351a87cdb504c7fc575ca, e28d2af43614eb86f59812e7221735fc221bbc10 to before befb7f889594d23e1b475720cf93efd2f77df000, e28d2af43614eb86f59812e7221735fc221bbc10 to before 394b6d8bbdf9ddee6d5bcf3e1f3e9f23eecd6484, e28d2af43614eb86f59812e7221735fc221bbc10 to before 50ed48c80fecbe17218afed4f8bed005c802976c
Linux

Linux · 4.10
Linux

linux_kernel · 1da177e4c3f4 to before 7e500849fa55, 1da177e4c3f4 to before 9daddee03de3, 1da177e4c3f4 to before 6470078ab3d8, 1da177e4c3f4 to before a55677878b93, 1da177e4c3f4 to before b7f6c3630eb3, 1da177e4c3f4 to before a64ab862e84e, 1da177e4c3f4 to before befb7f889594, 1da177e4c3f4 to before 394b6d8bbdf9, 1da177e4c3f4 to before 50ed48c80fec
linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: drivers/s390/crypto/zcrypt_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.3 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00241 · percentile 0.14087 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-26957.html