P4Verified

CVE-2024-49851: linux kernel from 4.12 (inclusive), before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive)…

CVE-2024-49851. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00219 (percentile 0.11476), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 745b361e989af21ad40811c2586b60229f870a68 to before 87e8134c18977b566f4ec248c8a147244da69402, 745b361e989af21ad40811c2586b60229f870a68 to before 2c9b228938e9266a1065a3f4fe5c99b7235dc439, 745b361e989af21ad40811c2586b60229f870a68 to before ebc4e1f4492d114f9693950621b3ea42b2f82bec, 745b361e989af21ad40811c2586b60229f870a68 to before c84ceb546f30432fccea4891163f7050f5bee5dd, 745b361e989af21ad40811c2586b60229f870a68 to before 82478cb8a23bd4f97935bbe60d64528c6d9918b4, 745b361e989af21ad40811c2586b60229f870a68 to before adf4ce162561222338cf2c9a2caa294527f7f721, 745b361e989af21ad40811c2586b60229f870a68 to before 3f9f72d843c92fb6f4ff7460d774413cde7f254c, 745b361e989af21ad40811c2586b60229f870a68 to before e3aaebcbb7c6b403416f442d1de70d437ce313a7
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/char/tpm/tpm-dev-common.c, drivers/char/tpm/tpm2-space.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 01:47 UTC

CWE: CWE-459
CCR priority: 22.1 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00219 · percentile 0.11476 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-49851.html