CVE-2024-40968
mediumpriority · track · 22EPSS 0.003 · 22 %ileDEEURUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is used to access the configuration space of the peripheral PCIe devices of the mips processor after the PCIe link surprise down, it can generate kernel panic caused by "Data bus error". So it is necessary to add PCIe link status check for system protection. When the PCIe link is down or in training, assigning a value of 0 to the configuration address can prevent read-write behavior to the configuration space of peripheral PCIe devices, thereby preventing kernel panic.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (83)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- SSA-355557SSA-355557: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.22025-08-12csaf · siemens_psirtDE
SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- WID-SEC-W-2024-1607Linux Kernel: Mehrere SchwachstellenDeutsch2024-07-14csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen oder einen unspezifischen Angriff durchzuführen.
- ICSA-25-226-07Siemens Third-Party Components in SINEC OS2025-08-12icsa · cisa_csaf_otUS
SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (27)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2024-40968/cnnvd
- https://git.kernel.org/stable/c/1c33fd17383f48f679186c54df78542106deeaa0cnnvd
- https://git.kernel.org/stable/c/25998f5613159fe35920dbd484fcac7ea3ad0799cnnvd
- https://git.kernel.org/stable/c/29b83a64df3b42c88c0338696feb6fdcd7f1f3b7cnnvd
- https://git.kernel.org/stable/c/38d647d509543e9434b3cc470b914348be271fe9cnnvd
- https://git.kernel.org/stable/c/64845ac64819683ad5e51b668b2ed56ee3386aeecnnvd
- https://git.kernel.org/stable/c/6bff05aaa32c2f7e1f6e68e890876642159db419cnnvd
- https://git.kernel.org/stable/c/6c1b9fe148a4e03bbfa234267ebb89f35285814acnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan