CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-38567: linux kernel from 2.6.37 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

CVE-2024-38567. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00254 (percentile 0.15761), scored 13-Oct-2026.

Affected technology

linux kernel · from 2.6.37 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before eb0f2fc3ff5806cc572cd9055ce7c52a01e97645, a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before ac3ed46a8741d464bc70ebdf7433c1d786cf329d, a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before 8650725bb0a48b206d5a8ddad3a7488f9a5985b7, a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before 6a9892bf24c906b4d6b587f8759ca38bff672582, a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before 265c3cda471c26e0f25d0c755da94e1eb15d7a0c, a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before 62eb07923f3693d55b0c2d9a5a4f1ad72cb6b8fd, a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before 03ddc74bdfd71b84a55c9f2185d8787f258422cd, a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before 0fa08a55201ab9be72bacb8ea93cf752d338184f, a84fab3cbfdc427e7d366f1cc844f27b2084c26c to before b6dd09b3dac89b45d1ea3e3bd035a3859c0369a0
Linux

Linux · 2.6.37
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/ath/carl9170/usb.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00254 · percentile 0.15761 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-38567.html