Get real-time updates on Telegram
CVE-2024-49900: linux kernel before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive), from 5.16 (inclusive)…
CVE-2024-49900. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.0028 (percentile 0.1892), scored 13-Oct-2026.
Affected technology
linux kernel · before 5.10.227 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux
linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7b24d41d47a6805c45378debf8bd115675d41da8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dac398ed272a378d2f42ac68ae408333a51baf52, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8b1dcf25c26d42e4a68c4725ce52a0543c7878cc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d7444f91a9f93eaa48827087ed0f3381c194181d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6041536d18c5f51a84bc37cd568cbab61870031e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c076b3746224982eebdba5c9e4b1467e146c0d64, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7c244d5b48284a770d96ff703df2dfeadf804a73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8ad8b531de79c348bcb8133e7f5e827b884226af, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2b59ffad47db1c46af25ccad157bb3b25147c35c
Linux
Linux · 2.6.12
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens
Component: Not specified by the source
File: fs/jfs/xattr.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-908
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.0028 · percentile 0.1892 · 2026-10-13
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-49900.html