P4Verified

CVE-2024-35984: linux kernel from 3.19 (inclusive), before 4.19.313 (exclusive), from 4.20 (inclusive), before 5.4.275 (exclusive)…

CVE-2024-35984. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00257 (percentile 0.16131), scored 13-Oct-2026.

Affected technology

linux kernel · from 3.19 (inclusive), before 4.19.313 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.158 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.90 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.30 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.9 (exclusive)
linux

Linux · 63453b59e41173241c4efe9335815f6432fa8586 to before 40f1d79f07b49c8a64a861706e5163f2db4bd95d, 63453b59e41173241c4efe9335815f6432fa8586 to before ad3c3ac7a03be3697114f781193dd3e9d97e6e23, 63453b59e41173241c4efe9335815f6432fa8586 to before 5fd72404587d7db4acb2d241fd8c387afb0a7aec, 63453b59e41173241c4efe9335815f6432fa8586 to before 5a09eae9a7db597fe0c1fc91636205b4a25d2620, 63453b59e41173241c4efe9335815f6432fa8586 to before 4e75e222d397c6752b229ed72fc4644c8c36ecde, 63453b59e41173241c4efe9335815f6432fa8586 to before e3425674ff68dc521c57c6eabad0cbd20a027d85, 63453b59e41173241c4efe9335815f6432fa8586 to before 357c64ef1ef39b1e7cd91ab6bdd304d043702c83, 63453b59e41173241c4efe9335815f6432fa8586 to before 91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f
Linux

Linux · 4.19
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: pointer, always
File: drivers/i2c/i2c-core-base.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 01:47 UTC

CWE: CWE-476
CCR priority: 22.1 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00257 · percentile 0.16131 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-35984.html