CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-49948: linux kernel from 3.9 (inclusive), before 4.19.323 (exclusive), from 4.20 (inclusive), before 5.4.285 (exclusive)…

CVE-2024-49948. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00291 (percentile 0.20082), scored 13-Oct-2026.

Affected technology

linux kernel · from 3.9 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 1def9238d4aa2146924994aa4b7dc861f03b9362 to before d7d1a28f5dd57b4d83def876f8d7b4403bd37df9, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 473426a1d53a68dd1e718e6cd00d57936993fa6c, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 566a931a1436d0e0ad13708ea55479b95426213c, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 2415f465730e48b6e38da1c7c097317bf5dd2d20, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 27a8fabc54d2f960d47bdfbebf2bdc6e8a92a4c4, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 9b0ee571d20a238a22722126abdfde61f1b2bdd0, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before ff1c3cadcf405ab37dd91418a62a7acecf3bc5e2, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 1eebe602a8d8264a12e35e39d0645fa88dbbacdd, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before ab9a9a9e9647392a19e7a885b08000e89c86b535
Linux

Linux · 3.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/core/dev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00291 · percentile 0.20082 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-49948.html