CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-38615: linux kernel from 5.1 (inclusive), before 5.4.278 (exclusive), from 5.5 (inclusive), before 5.10.219 (exclusive), from…

CVE-2024-38615. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00237 (percentile 0.13611), scored 13-Oct-2026.

Affected technology

linux kernel · from 5.1 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · 91a12e91dc39137906d929a4ff6f9c32c59697fa to before 2d730b465e377396d2a09a53524b96b111f7ccb6, 91a12e91dc39137906d929a4ff6f9c32c59697fa to before dfc56ff5ec9904c008e9376d90a6d7e2d2bec4d3, 91a12e91dc39137906d929a4ff6f9c32c59697fa to before 35db5e76d5e9f752476df5fa0b9018a2398b0378, 91a12e91dc39137906d929a4ff6f9c32c59697fa to before 8bc9546805e572ad101681437a49939f28777273, 91a12e91dc39137906d929a4ff6f9c32c59697fa to before 3e99f060cfd2e36504d62c9132b453ade5027e1c, 91a12e91dc39137906d929a4ff6f9c32c59697fa to before ae37ebca325097d773d7bb6ec069123b30772872, 91a12e91dc39137906d929a4ff6f9c32c59697fa to before a8204d1b6ff762d2171d365c2c8560285d0a233d, 91a12e91dc39137906d929a4ff6f9c32c59697fa to before b8f85833c05730d631576008daaa34096bc7f3ce
Linux

Linux · 5.1
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/cpufreq/cpufreq.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00237 · percentile 0.13611 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-38615.html