Get real-time updates on Telegram
CVE-2024-35849: linux kernel before 4.19.313 (exclusive), from 4.20 (inclusive), before 5.4.275 (exclusive), from 5.5 (inclusive)…
CVE-2024-35849. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00256 (percentile 0.15939), scored 13-Oct-2026.
Affected technology
linux kernel · before 4.19.313 (exclusive)
linux
linux kernel · from 4.20 (inclusive), before 5.4.275 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.158 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.90 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.30 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.8.9 (exclusive)
linux
linux kernel · 6.9 · update rc1
linux
linux kernel · 6.9 · update rc2
linux
linux kernel · 6.9 · update rc3
linux
linux kernel · 6.9 · update rc4
linux
linux kernel · 6.9 · update rc5
linux
debian linux · 10.0
debian
Linux · a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 689efe22e9b5b7d9d523119a9a5c3c17107a0772, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 73db209dcd4ae026021234d40cfcb2fb5b564b86, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 30189e54ba80e3209d34cfeea87b848f6ae025e6, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before e58047553a4e859dafc8d1d901e1de77c9dd922d, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 8bdbcfaf3eac42f98e5486b3d7e130fa287811f6, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 3a63cee1a5e14a3e52c19142c61dd5fcb524f6dc, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before fddc19631c51d9c17d43e9f822a7bc403af88d54, a542ad1bafc7df9fc16de8a6894b350a4df75572 to before 2f7ef5bb4a2f3e481ef05fab946edb97c84f67cf
Linux
Linux · 3.2
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens
Component: Not specified by the source
File: fs/btrfs/backref.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-908
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.00256 · percentile 0.15939 · 2026-10-13
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-35849.html