Get real-time updates on Telegram
CVE-2024-42094: linux kernel before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive), from 5.5 (inclusive)…
CVE-2024-42094. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00235 (percentile 0.13321), scored 13-Oct-2026.
Affected technology
linux kernel · before 4.19.317 (exclusive)
linux
linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.97 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.37 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.9.8 (exclusive)
linux
Linux · 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 2b085521be5292016097b5e7ca81b26be3f7098d, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 842afb47d84536fc976fece8fb6c54bea711ad1a, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 9dadab0db7d904413ea1cdaa13f127da05c31e71, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 0af718a690acc089aa1bbb95a93df833d864ef53, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before d85ca8179a54ff8cf1e1f8c3c9e3799831319bae, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 724e7965af054079242b8d6f7e50ee226730a756, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 2d090c7f7be3b26fcb80ac04d08a4a8062b1d959, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before be4e1304419c99a164b4c0e101c7c2a756b635b9
Linux
Linux · 2.6.21
Linux
RUGGEDCOM RST2428P · 0 to before V3.1
Siemens
SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens
Component: Not specified by the source
File: net/iucv/iucv.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-787
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.00235 · percentile 0.13321 · 2026-10-13
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-42094.html