P4Verified

CVE-2024-56631: linux kernel from 3.16.85 (inclusive), before 6.6.66 (exclusive), from 6.7 (inclusive), before 6.12.5 (exclusive)…

CVE-2024-56631. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00288 (percentile 0.1981), scored 13-Oct-2026.

Affected technology

linux kernel · from 3.16.85 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · cc833acbee9db5ca8c6162b015b4c93863c6f821 to before e19acb1926c4a1f30ee1ec84d8afba2d975bd534, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 285ce1f89f8d414e7eecab5ef5118cd512596318, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 198b89dd5a595ee3f96e5ce5c448b0484cd0e53c, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 275b8347e21ab8193e93223a8394a806e4ba8918, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 59b30afa578637169e2819536bb66459fdddc39d, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 1f5e2f1ca5875728fcf62bc1a054707444ab4960, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before f10593ad9bc36921f623361c9e3dd96bd52d85ee, 3a27c0defb0315760100f8b1adc7c4acbe04c884, 3.16.85 to before 3.17
Linux

Linux · 3.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: kref_put
File: drivers/scsi/sg.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 01:47 UTC

CWE: CWE-416
CCR priority: 31.3 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS: 0.00288 · percentile 0.1981 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-56631.html