CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-40942: linux kernel from 2.6.26 (inclusive), before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive)…

CVE-2024-40942. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00278 (percentile 0.188), scored 13-Oct-2026.

Affected technology

linux kernel · from 2.6.26 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.95 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.35 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.6 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

Linux · 050ac52cbe1f3de2fb0d06f02c7919ae1f691c9e to before 377dbb220edc8421b7960691876c5b3bef62f89b, 050ac52cbe1f3de2fb0d06f02c7919ae1f691c9e to before ec79670eae430b3ffb7e0a6417ad7657728b8f95, 050ac52cbe1f3de2fb0d06f02c7919ae1f691c9e to before 7518e20a189f8659b8b83969db4d33a4068fcfc3, 050ac52cbe1f3de2fb0d06f02c7919ae1f691c9e to before c4c865f971fd4a255208f57ef04d814c2ae9e0dc, 050ac52cbe1f3de2fb0d06f02c7919ae1f691c9e to before 617dadbfb2d3e152c5753e28356d189c9d6f33c0, 050ac52cbe1f3de2fb0d06f02c7919ae1f691c9e to before 63d5f89bb5664d60edbf8cf0df911aaae8ed96a4, 050ac52cbe1f3de2fb0d06f02c7919ae1f691c9e to before d81e244af521de63ad2883e17571b789c39b6549, 050ac52cbe1f3de2fb0d06f02c7919ae1f691c9e to before b7d7f11a291830fdf69d3301075dd0fb347ced84
Linux

Linux · 2.6.26
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/mac80211/mesh_pathtbl.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-401
CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00278 · percentile 0.188 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-40942.html