CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-36905: linux kernel 2.6.12; +9 more affected products

CVE-2024-36905. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00332 (percentile 0.24562), scored 13-Oct-2026.

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 4.19.314 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.276 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.217 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.159 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.91 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.31 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

linux kernel · 6.9 · update rc7
linux

debian linux · 10.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 34e41a031fd7523bf1cd00a2adca2370aebea270, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ed5e279b69e007ce6c0fe82a5a534c1b19783214, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 413c33b9f3bc36fdf719690a78824db9f88a9485, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2552c9d9440f8e7a2ed0660911ff00f25b90a0a4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3fe4ef0568a48369b1891395d13ac593b1ba41b1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f47d0d32fa94e815fdd78b8b88684873e67939f4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cbf232ba11bc86a5281b4f00e1151349ef4d45cf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 94062790aedb505bdda209b10bea47b294d6394f
Linux

Linux · 2.6.12
Linux

linux_kernel · 1da177e4c3f4 to before 34e41a031fd7
linux

linux_kernel · 1da177e4c3f4 to before ed5e279b69e0
linux

linux_kernel · 1da177e4c3f4 to before 413c33b9f3bc
linux

linux_kernel · 1da177e4c3f to before 2552c9d9440f
linux

linux_kernel · 1da177e4c3f4 to before 3fe4ef0568a4
linux

linux_kernel · 1da177e4c3f4 to before f47d0d32fa94
linux

linux_kernel · 1da177e4c3f4 to before cbf232ba11bc
linux

linux_kernel · 1da177e4c3f4 to before 94062790aedb
linux

linux_kernel · 2.6.12
linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv4/tcp.c, net/ipv4/tcp_input.c, net/ipv4/tcp_output.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-369
CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00332 · percentile 0.24562 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-36905.html