CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-57951: linux kernel from 4.19.302 (inclusive), before 4.20 (exclusive), from 5.4.264 (inclusive), before 5.4.290 (exclusive)…

CVE-2024-57951. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00263 (percentile 0.16826), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.19.302 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.264 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.10.204 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.15.143 (inclusive), before 5.15.177 (exclusive)
linux

linux kernel · from 6.1.68 (inclusive), before 6.1.127 (exclusive)
linux

linux kernel · from 6.6.7 (inclusive), before 6.6.74 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.11 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

linux kernel · 6.13 · update rc7
linux

Linux · 54d0d83a53508d687fd4a225f8aa1f18559562d0 to before 95e4f62df23f4df1ce6ef897d44b8e23c260921a, 7f4c89400d2997939f6971c7981cc780a219e36b to before 14984139f1f2768883332965db566ef26db609e7, 6fcbcc6c8e52650749692c7613cbe71bf601670d to before 15b453db41d36184cf0ccc21e7df624014ab6a1a, 75b5016ce325f1ef9c63e5398a1064cf8a7a7354 to before 3d41dbf82e10c44e53ea602398ab002baec27e75, 53f408cad05bb987af860af22f4151e5a18e6ee8 to before a5cbbea145b400e40540c34816d16d36e0374fbc, 5c0930ccaad5a74d74e8b18b648c5eb21ed2fe94 to before 38492f6ee883c7b1d33338bf531a62cff69b4b28, 5c0930ccaad5a74d74e8b18b648c5eb21ed2fe94 to before 2f8dea1692eef2b7ba6a256246ed82c365fdc686, 9a2fc41acb69dd4e2a58d0c04346c3333c2341fc, 5.4.264 to before 5.4.290, 5.10.204 to before 5.10.234, 5.15.143 to before 5.15.177, 6.1.68 to before 6.1.127, 6.6.7 to before 6.6.74, 4.19.302 to before 4.20
Linux

Linux · 6.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: include/linux/hrtimer.h, kernel/cpu.c, kernel/time/hrtimer.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.3 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00263 · percentile 0.16898 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-57951.html