CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-35902: linux kernel from 4.19.310 (inclusive), before 4.19.312 (exclusive), from 5.4.272 (inclusive), before 5.7.274…

CVE-2024-35902. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00223 (percentile 0.11935), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.19.310 (inclusive), before 4.19.312 (exclusive)
linux

linux kernel · from 5.4.272 (inclusive), before 5.7.274 (exclusive)
linux

linux kernel · from 5.10.213 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.15.152 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 6.1.82 (inclusive), before 6.1.85 (exclusive)
linux

linux kernel · from 6.6.22 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7.10 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

debian linux · 10.0
debian

Linux · 786854141057751bc08eb26f1b02e97c1631c8f4 to before d275de8ea7be3a453629fddae41d4156762e814c, 997efea2bf3a4adb96c306b9ad6a91442237bf5b to before bcd46782e2ec3825d10c1552fcb674d491cc09f9, 9dfc15a10dfd44f8ff7f27488651cb5be6af83c2 to before cfb786b03b03c5ff38882bee38525eb9987e4d14, b562ebe21ed9adcf42242797dd6cb75beef12bf0 to before d49fac38479bfdaec52b3ea274d290c47a294029, 998fd719e6d6468b930ac0c44552ea9ff8b07b80 to before cbaac2e5488ed54833897264a5ffb2a341a9f196, 2b505d05280739ce31d5708da840f42df827cb85 to before 92309bed3c5fbe2ccd4c45056efd42edbd06162d, c055fc00c07be1f0df7375ab0036cebd1106ed38 to before 6794090c742008c53b344b35b021d4a3093dc50a, c055fc00c07be1f0df7375ab0036cebd1106ed38 to before 62fc3357e079a07a22465b9b6ef71bb6ea75ee4b, 907761307469adecb02461a14120e9a1812a5fb1, 4.19.310 to before 4.19.312, 5.4.272 to before 5.4.274, 5.10.213 to before 5.10.215, 5.15.152 to before 5.15.154, 6.1.82 to before 6.1.85, 6.6.22 to before 6.6.26, 6.7.10 to before 6.8
Linux

Linux · 6.8
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/rds/rdma.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00223 · percentile 0.11935 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-35902.html