Get real-time updates on Telegram
CVE-2024-38621: linux kernel from 3.7 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…
CVE-2024-38621. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00271 (percentile 0.17914), scored 13-Oct-2026.
Affected technology
linux kernel · from 3.7 (inclusive), before 4.19.316 (exclusive)
linux
linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.9.4 (exclusive)
linux
Linux · 9cb2173e6ea8f2948bd1367c93083a2500fcf08f to before f6a392266276730bea893b55d12940e32a25f56a, 9cb2173e6ea8f2948bd1367c93083a2500fcf08f to before ecf4ddc3aee8ade504c4d36b7b4053ce6093e200, 9cb2173e6ea8f2948bd1367c93083a2500fcf08f to before a16775828aaed1c54ff4e6fe83e8e4d5c6a50cb7, 9cb2173e6ea8f2948bd1367c93083a2500fcf08f to before 7532bcec0797adfa08791301c3bcae14141db3bd, 9cb2173e6ea8f2948bd1367c93083a2500fcf08f to before b504518a397059e1d55c521ba0ea2b545a6c4b52, 9cb2173e6ea8f2948bd1367c93083a2500fcf08f to before d410017a7181cb55e4a5c810b32b75e4416c6808, 9cb2173e6ea8f2948bd1367c93083a2500fcf08f to before a08492832cc4cacc24e0612f483c86ca899b9261, 9cb2173e6ea8f2948bd1367c93083a2500fcf08f to before faa4364bef2ec0060de381ff028d1d836600a381
Linux
Linux · 3.7
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens
Component: Not specified by the source
File: drivers/media/usb/stk1160/stk1160-video.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-787
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.00271 · percentile 0.17914 · 2026-10-13
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-38621.html