CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-35955: linux kernel from 4.14.291 (inclusive), before 4.15 (exclusive), from 4.19.256 (inclusive), before 4.19.313…

CVE-2024-35955. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.01177 (percentile 0.66806), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.14.291 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.256 (inclusive), before 4.19.313 (exclusive)
linux

linux kernel · from 5.4.211 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.10.137 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.15.61 (inclusive), before 5.15.157 (exclusive)
linux

linux kernel · from 5.18.18 (inclusive), before 5.19 (exclusive)
linux

linux kernel · from 5.19.2 (inclusive), before 6.1.87 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.28 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.7 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

debian linux · 10.0
debian

Linux · 1c836bad43f3e2ff71cc397a6e6ccb4e7bd116f8 to before b5808d40093403334d939e2c3c417144d12a6f33, 6a119c1a584aa7a2c6216458f1f272bf1bc93a93 to before 93eb31e7c3399e326259f2caa17be1e821f5a412, 2a49b025c36ae749cee7ccc4b7e456e02539cdc3 to before 5062d1f4f07facbdade0f402d9a04a788f52e26d, a1edb85e60fdab1e14db63ae8af8db3f0d798fb6 to before 2df2dd27066cdba8041e46a64362325626bdfb2e, 28f6c37a2910f565b4f5960df52b2eccae28c891 to before 62029bc9ff2c17a4e3a2478d83418ec575413808, 28f6c37a2910f565b4f5960df52b2eccae28c891 to before d15023fb407337028a654237d8968fefdcf87c2f, 28f6c37a2910f565b4f5960df52b2eccae28c891 to before 36b57c7d2f8b7de224980f1a284432846ad71ca0, 28f6c37a2910f565b4f5960df52b2eccae28c891 to before 325f3fb551f8cd672dbbfc4cf58b14f9ee3fc9e8, 4262b6eb057d86c7829168c541654fe0d48fdac8, 97e813e6a143edf4208e15c72199c495ed80cea5, 16a544f1e013ba0660612f3fe35393b143b19a84, 4.19.256 to before 4.19.313, 5.4.211 to before 5.4.275, 5.10.137 to before 5.10.216, 5.15.61 to before 5.15.157, 4.14.291 to before 4.15, 5.18.18 to before 5.19, 5.19.2 to before 5.20
Linux

Linux · 6.0
Linux

linux_kernel · 1c836bad43f3 to before b5808d400934, 6a119c1a584a to before 93eb31e7c339, 2a49b025c36a to before 93eb31e7c339, a1edb85e60fd to before 2df2dd27066c, 28f6c37a2910 to before 62029bc9ff2c, 28f6c37a2910 to before d15023fb4073, 28f6c37a2910 to before 36b57c7d2f8b, 28f6c37a2910 to before 325f3fb551f8, 6.0
linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: kernel/kprobes.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
35.5 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.01177 · percentile 0.66806 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-35955.html