Get real-time updates on Telegram
CVE-2024-38560: linux kernel from 3.19 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…
CVE-2024-38560. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00265 (percentile 0.1706), scored 13-Oct-2026.
Affected technology
linux kernel · from 3.19 (inclusive), before 4.19.316 (exclusive)
linux
linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux
linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux
Linux · 9f30b674759b9a2da25aefe25d885161d8a911cb to before 481fc0c8617304a67649027c4a44723a139a0462, 9f30b674759b9a2da25aefe25d885161d8a911cb to before 595a6b98deec01b6dbb20139f71edcd5fb760ec2, 9f30b674759b9a2da25aefe25d885161d8a911cb to before 00b425ff0891283207d7bad607a2412225274d7a, 9f30b674759b9a2da25aefe25d885161d8a911cb to before 1708e3cf2488788cba5489e4f913d227de757baf, 9f30b674759b9a2da25aefe25d885161d8a911cb to before 7d3e694c4fe30f3aba9cd5ae86fb947a54c3db5c, 9f30b674759b9a2da25aefe25d885161d8a911cb to before 204714e68015d6946279719fd464ecaf57240f35, 9f30b674759b9a2da25aefe25d885161d8a911cb to before 7510fab46b1cbd1680e2a096e779aec3334b4143, 9f30b674759b9a2da25aefe25d885161d8a911cb to before ecb76200f5557a2886888aaa53702da1ab9e6cdf, 9f30b674759b9a2da25aefe25d885161d8a911cb to before 13d0cecb4626fae67c00c84d3c7851f6b62f7df3
Linux
Linux · 3.19
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens
Component: Not specified by the source
File: drivers/scsi/bfa/bfad_debugfs.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.00265 · percentile 0.1706 · 2026-10-13
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-38560.html