CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-42094: linux kernel before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive), from 5.5 (inclusive)…

CVE-2024-42094. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00235 (percentile 0.13321), scored 13-Oct-2026.

Affected technology

linux kernel · before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.97 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.37 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.8 (exclusive)
linux

Linux · 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 2b085521be5292016097b5e7ca81b26be3f7098d, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 842afb47d84536fc976fece8fb6c54bea711ad1a, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 9dadab0db7d904413ea1cdaa13f127da05c31e71, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 0af718a690acc089aa1bbb95a93df833d864ef53, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before d85ca8179a54ff8cf1e1f8c3c9e3799831319bae, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 724e7965af054079242b8d6f7e50ee226730a756, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 2d090c7f7be3b26fcb80ac04d08a4a8062b1d959, 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before be4e1304419c99a164b4c0e101c7c2a756b635b9
Linux

Linux · 2.6.21
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/iucv/iucv.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-787
CCR priority
28.5 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
EPSS
0.00235 · percentile 0.13321 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-42094.html