CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-38612: linux kernel from 4.10 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

CVE-2024-38612. CVSS 3.1 base score 7.0 (HIGH, Source advisory). EPSS 0.00661 (percentile 0.50289), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.10 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · 46738b1317e169b281ad74690276916e24d1be6d to before 10610575a3ac2a702bf5c57aa931beaf847949c7, 46738b1317e169b281ad74690276916e24d1be6d to before 646cd236c55e2cb5f146fc41bbe4034c4af5b2a4, 46738b1317e169b281ad74690276916e24d1be6d to before 00e6335329f23ac6cf3105931691674e28bc598c, 46738b1317e169b281ad74690276916e24d1be6d to before 1a63730fb315bb1bab97edd69ff58ad45e04bb01, 46738b1317e169b281ad74690276916e24d1be6d to before e77a3ec7ada84543e75722a1283785a6544de925, 46738b1317e169b281ad74690276916e24d1be6d to before 3398a40dccb88d3a7eef378247a023a78472db66, 46738b1317e169b281ad74690276916e24d1be6d to before 85a70ff1e572160f1eeb096ed48d09a1c9d4d89a, 46738b1317e169b281ad74690276916e24d1be6d to before c04d6a914e890ccea4a9d11233009a2ee7978bf4, 46738b1317e169b281ad74690276916e24d1be6d to before 160e9d2752181fcf18c662e74022d77d3164cd45
Linux

Linux · 4.10
Linux

linux_kernel · 46738b1317e1 to before 0610575a3ac
linux

linux_kernel · 46738b1317e1 to before 646cd236c55e
linux

linux_kernel · 46738b1317e1 to before 00e6335329f2
linux

linux_kernel · 46738b1317e1 to before 1a63730fb315
linux

linux_kernel · 46738b1317e1 to before e77a3ec7ada8
linux

linux_kernel · 46738b1317e1 to before 3398a40dccb8
linux

linux_kernel · 46738b1317e1 to before 85a70ff1e572
linux

linux_kernel · 46738b1317e1 to before c04d6a914e89
linux

linux_kernel · 46738b1317e1 to before 160e9d275218
linux

linux_kernel · 4.10
linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv6/seg6.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416, CWE-476
CCR priority
28.2 /100 (P4)
CVSS 3.1
7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00661 · percentile 0.50289 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-38612.html