CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-35849: linux kernel before 4.19.313 (exclusive), from 4.20 (inclusive), before 5.4.275 (exclusive), from 5.5 (inclusive)…

CVE-2024-35849. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00256 (percentile 0.15939), scored 13-Oct-2026.

Affected technology

linux kernel · before 4.19.313 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.158 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.90 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.30 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.9 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

debian linux · 10.0
debian

Linux · a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 689efe22e9b5b7d9d523119a9a5c3c17107a0772, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 73db209dcd4ae026021234d40cfcb2fb5b564b86, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 30189e54ba80e3209d34cfeea87b848f6ae025e6, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before e58047553a4e859dafc8d1d901e1de77c9dd922d, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 8bdbcfaf3eac42f98e5486b3d7e130fa287811f6, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 3a63cee1a5e14a3e52c19142c61dd5fcb524f6dc, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before fddc19631c51d9c17d43e9f822a7bc403af88d54, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 2f7ef5bb4a2f3e481ef05fab946edb97c84f67cf
Linux

Linux · 3.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/btrfs/backref.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-908
CCR priority
28.5 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
EPSS
0.00256 · percentile 0.15939 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-35849.html