5.5

CVE-2024-43861: linux

CVSS: 5.5v3.1MediumModified
AliasesSUSE-SU-2024:4221-1SUSE-SU-2024:4237-1SUSE-SU-2024:4247-1
Published 20-08-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-43861 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 140 · Related 136
DLA-3912-1DLA-4008-1MGASA-2024-0309MGASA-2024-0310SUSE-SU-2024:3189-1SUSE-SU-2024:3190-1

Showing 100 of 140. Use Open JSON for the complete list.

Timeline

  1. 20-08-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip packets Free the unused skb when not ip packets arrive.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu128 products
  • linuxAll versions (No fix recorded) | < 5.4.0-200.220 | < 5.15.0-125.135 | < 6.8.0-50.51
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1135.145 | < 5.15.0-1072.78 | < 6.8.0-1020.22
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Suse4 products
  • kernel-livepatch-SLE15-SP2_Update_51&distro=SUSE Linux Enterprise Live Patching 15 SP2< 2-150200.5.6.1
  • kernel-livepatch-SLE15-SP3_Update_47&distro=SUSE Linux Enterprise Live Patching 15 SP3< 2-150300.7.6.1
  • kernel-livepatch-SLE15-SP4_Update_29&distro=SUSE Linux Enterprise Live Patching 15 SP4< 2-150400.9.6.1
  • kgraft-patch-SLE12-SP5_Update_59&distro=SUSE Linux Enterprise Live Patching 12 SP5< 2-8.6.1
Linux2 products
  • linux≥ c6adf77953bcec0ad63d7782479452464e50f7a3, < 3c90a69533b5bba73401ef884d033ea49ee99662 | ≥ c6adf77953bcec0ad63d7782479452464e50f7a3, < 37c093449704017870604994ba9b813cdb9475a4 | ≥ c6adf77953bcec0ad63d7782479452464e50f7a3, < e87f52225e04a7001bf55bbd7a330fa4252327b5 | ≥ c6adf77953bcec0ad63d7782479452464e50f7a3, < c4251a3deccad852b27e60625f31fba6cc14372f | ≥ c6adf77953bcec0ad63d7782479452464e50f7a3, < da518cc9b64df391795d9952aed551e0f782e446 | ≥ c6adf77953bcec0ad63d7782479452464e50f7a3, < f2c353227de14b0289298ffc3ba92058c4768384 | ≥ c6adf77953bcec0ad63d7782479452464e50f7a3, < c6c5b91424fafc0f83852d961c10c7e43a001882 | ≥ c6adf77953bcec0ad63d7782479452464e50f7a3, < 7ab107544b777c3bd7feb9fe447367d8edd5b202 | 4.12
  • linux_kernel≥ 4.12, < 4.19.320 | ≥ 4.20, < 5.4.282 | ≥ 5.5, < 5.10.224 | ≥ 5.11, < 5.15.165 | ≥ 5.16, < 6.1.105 | ≥ 6.2, < 6.6.46 | ≥ 6.7, < 6.10.5 | 6.11:rc1 | 6.11:rc2
Debian1 product
  • linux< 6.1.106-1 | < 6.10.6-1

4 vendors · 135 products

References

38 links
Show all 38 references