P5Verified

CVE-2024-49998: linux kernel from 5.15.155 (inclusive), before 5.16 (exclusive), from 5.16.10 (inclusive), before 5.17 (exclusive)…

CVE-2024-49998. CVSS 3.1 base score 4.7 (MEDIUM, NVD). EPSS 0.00174 (percentile 0.06326), scored 13-Oct-2026.

Affected technology

linux kernel · from 5.15.155 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 5.16.10 (inclusive), before 5.17 (exclusive)
linux

linux kernel · from 5.17 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · ff45899e732e57088985e3a497b1d9100571c0f5 to before 87bd909a7014e32790e8c759d5b7694a95778ca5, ee534378f00561207656663d93907583958339ae to before ab9e90619b6339becc5415647ae154a9a46a044d, ee534378f00561207656663d93907583958339ae to before 2e93bf719462ac6d23c881c8b93e5dc9bf5ab7f5, ee534378f00561207656663d93907583958339ae to before ab5d3420a1120950703dbdc33698b28a6ebc3d23, ee534378f00561207656663d93907583958339ae to before b4a65d479213fe84ecb14e328271251eebe69492, ee534378f00561207656663d93907583958339ae to before 6c24a03a61a245fe34d47582898331fa034b6ccd, 89b60402d43cdab4387dbbf24afebda5cf092ae7, 5.15.155 to before 5.15.176, 5.16.10 to before 5.17
Linux

Linux · 5.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: is
File: net/dsa/dsa.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 01:47 UTC

CWE: CWE-367, CWE-476
CCR priority: 18.8 /100 (P5)
CVSS 3.1: 4.7 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00174 · percentile 0.06326 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-49998.html