CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-36959: linux kernel from 4.9.334 (inclusive), before 4.10 (exclusive), from 4.14.300 (inclusive), before 4.15 (exclusive)…

CVE-2024-36959. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00252 (percentile 0.15409), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.9.334 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.300 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.267 (inclusive), before 4.19.314 (exclusive)
linux

linux kernel · from 5.4.225 (inclusive), before 5.4.276 (exclusive)
linux

linux kernel · from 5.10.156 (inclusive), before 5.10.217 (exclusive)
linux

linux kernel · from 5.15.80 (inclusive), before 5.15.159 (exclusive)
linux

linux kernel · from 6.0.10 (inclusive), before 6.1.91 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.31 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

Linux · a988dcd3dd9e691c5ccc3324b209688f3b5453e9 to before 06780473cb8a858d1d6cab2673e021b072a852d1, 040f726fecd88121f3b95e70369785ad452dddf9 to before 47d253c485491caaf70d8cd8c0248ae26e42581f, 777430aa4ddccaa5accec6db90ffc1d47f00d471 to before 35ab679e8bb5a81a4f922d3efbd43e32bce69274, 97e5b508e96176f1a73888ed89df396d7041bfcb to before 76aa2440deb9a35507590f2c981a69a57ecd305d, 91d5c5060ee24fe8da88cd585bb43b843d2f0dce to before 518d5ddafeb084d6d9b1773ed85164300037d0e6, 91d5c5060ee24fe8da88cd585bb43b843d2f0dce to before 026e24cf31733dbd97f41cc9bc5273ace428eeec, 91d5c5060ee24fe8da88cd585bb43b843d2f0dce to before c7e02ccc9fdc496fe51e440e3e66ac36509ca049, 91d5c5060ee24fe8da88cd585bb43b843d2f0dce to before a0cedbcc8852d6c77b00634b81e41f17f29d9404, aaf552c5d53abe4659176e099575fe870d2e4768, b4d9f55cd38435358bc16d580612bc0d798d7b4c, 5834a3a98cd266ad35a229923c0adbd0addc8d68, 4.19.267 to before 4.19.314, 5.4.225 to before 5.4.276, 5.10.156 to before 5.10.217, 5.15.80 to before 5.15.159, 4.9.334 to before 4.10, 4.14.300 to before 4.15, 6.0.10 to before 6.1
Linux

Linux · 6.1
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/pinctrl/devicetree.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00252 · percentile 0.15409 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-36959.html