P4Verified

CVE-2024-43890: linux kernel from 4.7 (inclusive), before 4.19.320 (exclusive), from 4.20 (inclusive), before 5.4.282 (exclusive)…

CVE-2024-43890. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00257 (percentile 0.16083), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.7 (inclusive), before 4.19.320 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.282 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.224 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.165 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.105 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.46 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.5 (exclusive)
linux

linux kernel · 6.11 · update rc1
linux

linux kernel · 6.11 · update rc2
linux

Linux · 08d43a5fa063e03c860f2f391a30c388bcbc948e to before 302ceb625d7b990db205a15e371f9a71238de91c, 08d43a5fa063e03c860f2f391a30c388bcbc948e to before d3e4dbc2858fe85d1dbd2e72a9fc5dea988b5c18, 08d43a5fa063e03c860f2f391a30c388bcbc948e to before eb223bf01e688dfe37e813c8988ee11c8c9f8d0a, 08d43a5fa063e03c860f2f391a30c388bcbc948e to before cd10d186a5409a1fe6e976df82858e9773a698da, 08d43a5fa063e03c860f2f391a30c388bcbc948e to before 788ea62499b3c18541fd6d621964d8fafbc4aec5, 08d43a5fa063e03c860f2f391a30c388bcbc948e to before a172c7b22bc2feaf489cfc6d6865f7237134fdf8, 08d43a5fa063e03c860f2f391a30c388bcbc948e to before 236bb4690773ab6869b40bedc7bc8d889e36f9d6, 08d43a5fa063e03c860f2f391a30c388bcbc948e to before bcf86c01ca4676316557dd482c8416ece8c2e143
Linux

Linux · 4.7
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: kernel/trace/tracing_map.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 01:47 UTC

CWE: CWE-190
CCR priority: 22.1 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00257 · percentile 0.16083 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-43890.html