CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-49949: linux kernel from 4.14.256 (inclusive), before 4.19 (exclusive), from 4.19.218 (inclusive), before 5.4 (exclusive)…

CVE-2024-49949. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0028 (percentile 0.18933), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.14.256 (inclusive), before 4.19 (exclusive)
linux

linux kernel · from 4.19.218 (inclusive), before 5.4 (exclusive)
linux

linux kernel · from 5.4.162 (inclusive), before 5.10 (exclusive)
linux

linux kernel · from 5.10.82 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.5 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 960b360ca7463921c1a6b72e7066a706d6406223 to before d70ca7598943572d5e384227bd268acb5109bf72, fb2dbc124a7f800cd0e4f901a1bbb769a017104c to before 1598d70ad9c7d0a4d9d54b82094e9f45908fda6d, 8e6bae950da9dc2d2c6c18b1c6b206dc00dc8772 to before ba26060a29d3ca1bfc737aa79f7125128f35147c, 0f810d06b507aa40fef8d1ac0a88e6d0590dbfc3 to before 939c88cbdc668dadd8cfa7a35d9066331239041c, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before d6114993e0a89fde84a60a60a8329a571580b174, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before 25ab0b87dbd89cecef8a9c60a02bb97832e471d1, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before f959cce8a2a04ce776aa8b78e83ce339e0d7fbac, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before 81fd007dcd47c34471766249853e4d4bce8eea4b, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before c20029db28399ecc50e556964eaba75c43b1e2f1, 2128303bff700c857739a0af8cc39c1a41840650, 4.19.218 to before 4.19.323, 5.4.162 to before 5.4.285, 5.10.82 to before 5.10.227, 5.15.5 to before 5.15.168, 4.14.256 to before 4.15
Linux

Linux · 5.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/core/dev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.0028 · percentile 0.18933 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-49949.html