CVE-2021-47219, CVE-2021-47469, CVE-2022-49034 +293 more CVEs: Rejected reason: This CVE ID (exact versions not specified); +15 more affected products

CVE-2021-47219

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47469

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2022-49034

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-52458

Affected technology

linux kernel · before 5.10.215 (exclusive)
linux

linux kernel · from 5.11.0 (inclusive), before 5.15.148 (exclusive)
linux

linux kernel · from 5.16.0 (inclusive), before 6.1.75 (exclusive)
linux

linux kernel · from 6.2.0 (inclusive), before 6.6.14 (exclusive)
linux

linux kernel · from 6.7.0 (inclusive), before 6.7.2 (exclusive)
linux

Linux · 633395b67bb222f85bb8f825c7751a54b9ec84ee to before 8f6dfa1f1efe6dcca2d43e575491d8fcbe922f62, 633395b67bb222f85bb8f825c7751a54b9ec84ee to before 5010c27120962c85d2f421d2cf211791c9603503, 633395b67bb222f85bb8f825c7751a54b9ec84ee to before ef31cc87794731ffcb578a195a2c47d744e25fb8, 633395b67bb222f85bb8f825c7751a54b9ec84ee to before cb16cc1abda18a9514106d2ac8c8d7abc0be5ed8, 633395b67bb222f85bb8f825c7751a54b9ec84ee to before bcdc288e7bc008daf38ef0401b53e4a8bb61bbe5, 633395b67bb222f85bb8f825c7751a54b9ec84ee to before 6f64f866aa1ae6975c95d805ed51d7e9433a0016
Linux

Linux · 4.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: block/ioctl.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-23848

Affected technology

linux kernel · through 6.7.1 (inclusive)
linux

n/a · n/a
Vendor not specified by the source

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Description’s affected range: through 6.7.1

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-35887

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-35896

Affected technology

linux kernel · from 2.6.12 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.85 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

debian linux · 10.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0f038242b77ddfc505bf4163d4904c1abd2e74d6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 440e948cf0eff32cfe322dcbca3f2525354b159b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 18aae2cb87e5faa9c5bd865260ceadac60d5a6c5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 81d51b9b7c95e791ba3c1a2dd77920a9d3b3f525, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 58f2bfb789e6bd3bc24a2c9c1580f3c67aec3018, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0c83842df40f86e529db6842231154772c20edcc
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/bridge/netfilter/ebtables.c, net/ipv4/netfilter/arp_tables.c, net/ipv4/netfilter/ip_tables.c, net/ipv6/netfilter/ip6_tables.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-38544

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-38588

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-40911

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-40953

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-40965

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-41016

Affected technology

linux kernel · before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.112 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.53 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.12 (exclusive)
linux

Linux · cf1d6c763fbcb115263114302485ad17e7933d87 to before e2b3d7a9d019d4d1a0da6c3ea64a1ff79c99c090, cf1d6c763fbcb115263114302485ad17e7933d87 to before e8f9c4af7af7e9e4cd09c0251c7936593147419f, cf1d6c763fbcb115263114302485ad17e7933d87 to before 57a3d89831fcaa2cdbe024b47c7c36d5a56c3637, cf1d6c763fbcb115263114302485ad17e7933d87 to before c031d286eceb82f72f8623b7f4abd2aa491bfb5e, cf1d6c763fbcb115263114302485ad17e7933d87 to before cfb926051fab19b10d1e65976211f364aa820180, cf1d6c763fbcb115263114302485ad17e7933d87 to before c726dea9d0c806d64c26fcef483b1fb9474d8c5e, cf1d6c763fbcb115263114302485ad17e7933d87 to before e4ffea01adf3323c821b6f37e9577d2d400adbaa, cf1d6c763fbcb115263114302485ad17e7933d87 to before af77c4fc1871847b528d58b7fdafb4aa1f6a9262
Linux

Linux · 2.6.28
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/ocfs2/xattr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-41066

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-42252

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-43098

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-43863

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-43900

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-44931

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-44938

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46731

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46849

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46853

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46854

Affected technology

linux kernel · from 4.10 (inclusive), before 6.1.111 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.52 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.11 (exclusive)
linux

linux kernel · 6.11 · update rc1
linux

linux kernel · 6.11 · update rc2
linux

linux kernel · 6.11 · update rc3
linux

linux kernel · 6.11 · update rc4
linux

linux kernel · 6.11 · update rc5
linux

linux kernel · 6.11 · update rc6
linux

linux kernel · 6.11 · update rc7
linux

Linux · 9ad1a37493338cacf04e2c93acf44d151a7adda8 to before cd5b9d657ecd44ad5f254c3fea3a6ab1cf0e2ef7, 9ad1a37493338cacf04e2c93acf44d151a7adda8 to before dc43a096cfe65b5c32168313846c5cd135d08f1d, 9ad1a37493338cacf04e2c93acf44d151a7adda8 to before 1f31f51bfc8214a6deaac2920e6342cb9d019133, 9ad1a37493338cacf04e2c93acf44d151a7adda8 to before 38f5db5587c0ee53546b28c50ba128253181ac83, 9ad1a37493338cacf04e2c93acf44d151a7adda8 to before f43190e33224c49e1c7ebbc25923ff400d87ec00, 9ad1a37493338cacf04e2c93acf44d151a7adda8 to before 34fcac26216ce17886af3eb392355b459367af1a, 9ad1a37493338cacf04e2c93acf44d151a7adda8 to before ce8eabc912fe9b9a62be1a5c6af5ad2196e90fc2, 9ad1a37493338cacf04e2c93acf44d151a7adda8 to before cbd7ec083413c6a2e0c326d49e24ec7d12c7a9e0
Linux

Linux · 4.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/freescale/dpaa/dpaa_eth.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47670

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47671

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47672

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47674

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47679

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47684

Affected technology

linux kernel · from 4.13 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

linux kernel · 3.10.108
linux

Linux · e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before ad4f0a14d6856e68f023fc4e5017cfd881a3dfbc, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 16e0387d87fc858e34449fdf2b14ed5837f761db, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before ec31cf42fc4e35bb1248ce6eb1de6de9f851ac86, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 5c4c03288a4aea705e36aa44119c13d7ee4dce99, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 96c4983eab2a5da235f7fff90beaf17b008ba029, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 570f7d8c9bf14f041152ba8353d4330ef7575915, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 81d18c152e3f82bacadf83bc0a471b2363b9cc18, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 09aea49fbc7e755a915c405644f347137cdb62b0, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before c8770db2d54437a5f49417ae7b46f7de23d14db6, 42a858e036bb26cb559157393b7890cabe70bfc2, 3.10.108 to before 3.11
Linux

Linux · 4.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: include/net/tcp.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47685

Affected technology

debian linux · 11.0
debian

linux kernel · from 3.18 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · c8d7b98bec43faaa6583c3135030be5eb4693acb to before 872eca64c3267dbc5836b715716fc6c03a18eda7, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 7bcbc4cda777d26c88500d973fad0d497fc8a82e, c8d7b98bec43faaa6583c3135030be5eb4693acb to before dcf48ab3ca2c55b09c8f9c8de0df01c1943bc4e5, c8d7b98bec43faaa6583c3135030be5eb4693acb to before fbff87d682e57ddbbe82abf6d0a1a4a36a98afcd, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 7ea2bcfd9bf4c3dbbf22546162226fd1c14d8ad2, c8d7b98bec43faaa6583c3135030be5eb4693acb to before af4b8a704f26f38310655bad67fd8096293275a2, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 7a7b5a27c53b55e91eecf646d1b204e73fa4af93, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 10210658f827ad45061581cbfc05924b723e8922, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 9c778fe48d20ef362047e3376dee56d77f8500d4
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/ipv6/netfilter/nf_reject_ipv6.c

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47692

Affected technology

linux kernel · from 5.2 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 74725959c33c14114fdce1e36e3504d106584d53 to before 6d07040ae5c2214e39c7444d898039c9e655a79a, 74725959c33c14114fdce1e36e3504d106584d53 to before 0f1d007bbea38a61cf9c5392708dc70ae9d84a3d, 74725959c33c14114fdce1e36e3504d106584d53 to before b7b7a8df41ef18862dd6b22289fb46c2c12398af, 74725959c33c14114fdce1e36e3504d106584d53 to before 84a563d136faf514fdad1ade28d7a142fd313cb8, 74725959c33c14114fdce1e36e3504d106584d53 to before 318f70857caab3da9a6ada9bc8c1f4f7591b695e, 74725959c33c14114fdce1e36e3504d106584d53 to before 766d5fbd78f7a52b3888449a0358760477b74602, 74725959c33c14114fdce1e36e3504d106584d53 to before 1ff8be8d008b9ddc8e7043fbddd37d5d451b271b, 74725959c33c14114fdce1e36e3504d106584d53 to before 22451a16b7ab7debefce660672566be887db1637
Linux

Linux · 5.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4recover.c

Attack conditions (NVD, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47696

Affected technology

linux kernel · from 4.19.320 (inclusive), before 5.4 (exclusive)
linux

linux kernel · from 5.4.282 (inclusive), before 5.10 (exclusive)
linux

linux kernel · from 5.10.224 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.165 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.103 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.44 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.10.3 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · d91d253c87fd1efece521ff2612078a35af673c6 to before da2708a19f45b4a7278adf523837c8db21d1e2b5, 7f25f296fc9bd0435be14e89bf657cd615a23574 to before 29b3bbd912b8db86df7a3c180b910ccb621f5635, 94ee7ff99b87435ec63211f632918dc7f44dac79 to before 2efe8da2ddbf873385b4bc55366d09350b408df6, 557d035fe88d78dd51664f4dc0e1896c04c97cf6 to before da0392698c62397c19deb1b9e9bdf2fbb5a9420e, dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 to before a64f30db12bdc937c5108158d98c8eab1925c548, ff5bbbdee08287d75d72e65b72a2b76d9637892a to before 8b7df76356d098f85f3bd2c7cf6fb43f531893d7, ee39384ee787e86e9db4efb843818ef0ea9cb8ae to before c8b18a75282cfd27822a8cc3c1f005c1ac8d1a58, aee2424246f9f1dadc33faa78990c1e2eb7826e4 to before a09dc967b3c58899e259c0aea092f421d22a0b04, aee2424246f9f1dadc33faa78990c1e2eb7826e4 to before 86dfdd8288907f03c18b7fb462e0e232c4f98d89, 4.19.320 to before 4.19.323, 5.4.282 to before 5.4.285, 5.10.224 to before 5.10.227, 5.15.165 to before 5.15.168, 6.1.103 to before 6.1.113, 6.6.44 to before 6.6.54, 6.10.3 to before 6.10.13
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: flush_workqueue, alloc_ordered_workqueue
File: drivers/infiniband/core/iwcm.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47697

Affected technology

debian linux · 11.0
debian

linux kernel · from 4.0 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 8ffbe7d07b8e76193b151107878ddc1ccc94deb5, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 883f794c6e498ae24680aead55c16f66b06cfc30, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before badbd736e6649c4e6d7b4ff7e2b9857acfa9ea94, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 86d920d2600c3a48efc2775c1666c1017eec6956, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 3dba83d3c81de1368d15a39f22df7b53e306052f, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 58f31be7dfbc0c84a6497ad51924949cf64b86a2, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 7fd6aae7e53b94f4035b1bfce28b8dfa0d0ae470, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 042b101d7bf70616c4967c286ffa6fcca65babfb, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 46d7ebfe6a75a454a5fa28604f0ef1491f9d8d14
Linux

Linux · 4.0
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/media/dvb-frontends/rtl2830.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47698

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47699

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 2b78e9df10fb7f4e9d3d7a18417dd72fbbc1dfd0, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 1d94dbdfbb64cc48d10dec65cc3c4fbf2497b343, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 24bf40740a3da6b4056721da34997ae6938f3da1, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 73d23ecf234b7a6d47fb883f2dabe10e3230b31d, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before f68523e0f26faade18833fbef577a4295d8e2c94, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 21839b6fbc3c41b3e374ecbdb0cabbbb2c53cf34, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before db73500d3f0e558eb642aae1d4782e7726b4a03f, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 3644554d308ddf2669e459a1551a7edf60b2d62b, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 9403001ad65ae4f4c5de368bdda3a0636b51d51a
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/nilfs2/btree.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47701

Affected technology

linux kernel · from 3.8 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 5b076d37e8d99918e9294bd6b35a8bbb436819b0, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 8adf0eb4e361a9e060d54f4bd0ac9c5d85277d20, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 7fc22c3b3ffc0e952f5e0062dd11aa6ae76affba, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before be2e9b111e2790962cc66a177869b4e9717b4e29, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before ea32883e4a03ed575a2eb7a66542022312bde477, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 2a6579ef5f2576a940125729f7409cc182f1c8df, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 371d0bacecd529f887ea2547333d9173e7bcdc0a, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before ccb8c18076e2e630fea23fbec583cdad61787fc5, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before c6b72f5d82b1017bad80f9ebf502832fc321d796
Linux

Linux · 3.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ext4/inline.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47706

Affected technology

linux kernel · from 4.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 36eca894832351feed9072d0f97eb06fc9482ca4 to before a9bdd5b36887d2bacb8bc777fd18317c99fc2587, 36eca894832351feed9072d0f97eb06fc9482ca4 to before bc2140534b2aae752e4f7cb4489642dbb5ec4777, 36eca894832351feed9072d0f97eb06fc9482ca4 to before e1277ae780cca4e69ef5468d4582dfd48f0b8320, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 8aa9de02a4be2e7006e636816ce19b0d667ceaa3, 36eca894832351feed9072d0f97eb06fc9482ca4 to before ddbdaad123254fb53e32480cb74a486a6868b1e0, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 7faed2896d78e48ec96229e73b30b0af6c00a9aa, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 880692ee233ba63808182705b3333403413b58f5, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 6d130db286ad0ea392c96ebb2551acf0d7308048, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 18ad4df091dd5d067d2faa8fce1180b79f7041a7
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: block/bfq-iosched.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47707

Affected technology

linux kernel · from 4.3 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before a61a174280dad99f25a7dee920310885daf2552b, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 8a8b83016f06805775db099c8377024b6fa5b975, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before e43dd28405e6b9935279996725ee11e6306547a5, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before f2bd9635543ca41533b870f420872819f8331823, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 0ceb2f2b5c813f932d6e60d3feec5e7e713da783, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 9a0ddc73be37d19dff1ba08290af34e707d18e50, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 08409e401622e2896b4313be9f781bde8a2a6a53, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 04ccecfa959d3b9ae7348780d8e379c6486176ac, 58d772c203ee57c45620730198bc2d9ded7a1464, 4.2.5 to before 4.3
Linux

Linux · 4.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv6/route.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47709

Affected technology

linux kernel · from 5.4.284 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 6.1.110 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.51 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.10.10 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

linux kernel · 4.19.322
linux

linux kernel · 5.10.226
linux

linux kernel · 5.15.167
linux

Linux · 5c680022c4e28ba18ea500f3e29f0428271afa92 to before f5059fae5ed518fc56494ce5bdd4f5360de4b3bc, 33ed4ba73caae39f34ab874ba79138badc2c65dd to before a833da8eec20b51af39643faa7067b25c8b20f3e, aec92dbebdbec7567d9f56d7c9296a572b8fd849 to before 5cc00913c1fdcab861c4e65fa20d1f1e1bbbf977, 10bfacbd5e8d821011d857bee73310457c9c989a to before 9550baada4c8ef8cebefccc746384842820b4dff, 3b39dc2901aa7a679a5ca981a3de9f8d5658afe8 to before 7a145d6ec2124bdb94bd6fc436b342ff6ddf2b70, 4377b79323df62eb5d310354f19b4d130ff58d50 to before c3d941cc734e0c8dc486c062926d5249070af5e4, abb0a615569ec008e8a93d9f3ab2d5b418ea94d4 to before 770b463264426cc3c167b1d44efa85f6a526ce5b, 76fe372ccb81b0c89b6cd2fec26e2f38c958be85 to before b02ed2f01240b226570b4a19b5041d61f5125784, 76fe372ccb81b0c89b6cd2fec26e2f38c958be85 to before 94b0818fa63555a65f6ba107080659ea6bcca63e, 4.19.322 to before 4.19.323, 5.4.284 to before 5.4.285, 5.10.226 to before 5.10.227, 5.15.167 to before 5.15.168, 6.1.110 to before 6.1.113, 6.6.51 to before 6.6.54, 6.10.10 to before 6.10.13
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/can/bcm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47710

Affected technology

linux kernel · from 5.4.49 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.7.6 (inclusive), before 5.8 (exclusive)
linux

linux kernel · from 5.8 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 5bed77b0a2a0e6b6bc0ae8e851cafb38ef0374df to before bc05f6855642cff3c0eeb63060b35d8c4f8a851d, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 1a11a1a53255ddab8a903cdae01b9d3eb2c1a47b, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 984648aac87a6a1c8fd61663bec3f7b61eafad5e, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 04f62c012e0e4683e572b30baf6004ca0a3f6772, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 80bd490ac0a3b662a489e17d8eedeb1e905a3d40, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before ae8c1b3e7353ad240b829eabac7ba2584b2c6bdc, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before cd10abf41bae55c9d2b93f34a516dbf52626bcb7, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before b1339be951ad31947ae19bc25cb08769bf255100, 6fc372656a1ebed8c1ebe0011881058c02eeddc0, 5.4.49 to before 5.4.285, 5.7.6 to before 5.8
Linux

Linux · 5.8
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/core/sock_map.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47712

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47713

Affected technology

linux kernel · from 2.6.32 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 5061b0c2b9066de426fbc63f1278d2210e789412 to before 07eb0bd7b0a8abed9d45e0f567c9af1dc83e5268, 5061b0c2b9066de426fbc63f1278d2210e789412 to before 04f75f5bae33349283d6886901d9acd2f110c024, 5061b0c2b9066de426fbc63f1278d2210e789412 to before f232916fab67ca1c3425926df4a866e59ff26908, 5061b0c2b9066de426fbc63f1278d2210e789412 to before acb53a716e492a02479345157c43f21edc8bc64b, 5061b0c2b9066de426fbc63f1278d2210e789412 to before db5ca4b42ccfa42d2af7b335ff12578e57775c02, 5061b0c2b9066de426fbc63f1278d2210e789412 to before 058c9026ad79dc98572442fd4c7e9a36aba6f596, 5061b0c2b9066de426fbc63f1278d2210e789412 to before eab272972cffff9cd973b8e4055a8e81c64f7e6a, 5061b0c2b9066de426fbc63f1278d2210e789412 to before ad4b7068b101fbbb4a9ca4b99b25eb051a9482ec, 5061b0c2b9066de426fbc63f1278d2210e789412 to before 9d301de12da6e1bb069a9835c38359b8e8135121
Linux

Linux · 2.6.32
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/mac80211/iface.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47723

Affected technology

linux kernel · from 2.6.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d1017d2a0f3f16dc1db5120e7ddbe7c6680425b0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5ad6284c8d433f8a213111c5c44ead4d9705b622, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0338e66cba272351ca9d7d03f3628e390e70963b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ead82533278502428883085a787d5a00f15e5eb9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ce8b6ab44a8b5918c0ee373d4ad19d19017931b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c1ba4b8ca799ff1d99d01f37d7ccb7d5ba5533d2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 128d5cfdcf844cb690c9295a3a1c1114c21fc15a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 96855f40e152989c9e7c20c4691ace5581098acc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e63866a475562810500ea7f784099bfe341e761a
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_dmap.c, fs/jfs/jfs_imap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47737

Affected technology

linux kernel · from 3.16 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 3e8081ebff12bec1347deaceb6bce0765cce54df, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before c6b16e700cf4d959af524bd9d3978407ff7ce462, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 9f03f0016ff797932551881c7e06ae50e9c39134, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 9803ab882d565a8fb2dde5999d98866d1c499dfd, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 81821617312988096f5deccf0f7da6f888e98056, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before a1afbbb5276f943ad7173d0b4c626b8c75a260da, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before e32ee6a61041925d1a05c14d10352dcfce9ef029, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 8d0765f86135e27f0bb5c950c136495719b4c834, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before d078cbf5c38de83bc31f83c47dcd2184c04a50c7
Linux

Linux · 3.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4idmap.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47740

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47742

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47747

Affected technology

linux kernel · from 4.15 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 25d559ed2beec9b34045886100dac46d1ad92eba, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before b5a84b6c772564c8359a9a0fbaeb2a2944aa1ee9, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 338a0582b28e69460df03af50e938b86b4206353, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 822c7bb1f6f8b0331e8d1927151faf8db3b33afd, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 1c57d61a43293252ad732007c7070fdb112545fd, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before d2abc379071881798d20e2ac1d332ad855ae22f3, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 516dbc6d16637430808c39568cbb6b841d32b55b, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 77a77331cef0a219b8dd91361435eeef04cb741c, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before b5109b60ee4fcb2f2bb24f589575e10cc5283ad4
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: ether3_ledoff, to
File: drivers/net/ethernet/seeq/ether3.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47749

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47756

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47757

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-48881

Affected technology

linux kernel · from 4.19.291 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.251 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.10.188 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.15.121 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 6.1.39 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.4.4 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · 0729029e647234fa1a94376b6edffec5c2cd75f6 to before 4379c5828492a4c2a651c8f826a01453bd2b80b0, db9439cef0b5efccf8021fe89f4953e0f901e85b to before 336e30f32ae7c043fde0f6fa21586ff30bea9fe2, 991e9c186a8ac6ab272a86e0ddc6f9733c38b867 to before fb5fee35bdd18316a84b5f30881a24e1415e1464, 68118c339c6e1e16ae017bef160dbe28a27ae9c8 to before 5202391970ffbf81975251b3526b890ba027b715, 028ddcac477b691dd9205c92f991cc15259d033e to before cc05aa2c0117e20fa25a3c0d915f98b8f2e78667, 028ddcac477b691dd9205c92f991cc15259d033e to before 5e0e913624bcd24f3de414475018d3023f060ee1, 028ddcac477b691dd9205c92f991cc15259d033e to before b2e382ae12a63560fca35050498e19e760adf8c0, fe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8, 0cabf9e164660e8d66c4810396046383a1110a69, 5.4.251 to before 5.4.287, 5.10.188 to before 5.10.231, 5.15.121 to before 5.15.174, 6.1.39 to before 6.1.120, 4.19.291 to before 4.20, 6.4.4 to before 6.5
Linux

Linux · 6.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/md/bcache/super.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49851

Affected technology

linux kernel · from 4.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 745b361e989af21ad40811c2586b60229f870a68 to before 87e8134c18977b566f4ec248c8a147244da69402, 745b361e989af21ad40811c2586b60229f870a68 to before 2c9b228938e9266a1065a3f4fe5c99b7235dc439, 745b361e989af21ad40811c2586b60229f870a68 to before ebc4e1f4492d114f9693950621b3ea42b2f82bec, 745b361e989af21ad40811c2586b60229f870a68 to before c84ceb546f30432fccea4891163f7050f5bee5dd, 745b361e989af21ad40811c2586b60229f870a68 to before 82478cb8a23bd4f97935bbe60d64528c6d9918b4, 745b361e989af21ad40811c2586b60229f870a68 to before adf4ce162561222338cf2c9a2caa294527f7f721, 745b361e989af21ad40811c2586b60229f870a68 to before 3f9f72d843c92fb6f4ff7460d774413cde7f254c, 745b361e989af21ad40811c2586b60229f870a68 to before e3aaebcbb7c6b403416f442d1de70d437ce313a7
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/char/tpm/tpm-dev-common.c, drivers/char/tpm/tpm2-space.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49860

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49867

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49868

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49877

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49878

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49879

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49882

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49883

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49884

Affected technology

debian linux · 11.0
debian

linux kernel · from 3.18 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 393a46f60ea4f249dc9d496d4eb2d542f5e11ade, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 448100a29395b0c8b4c42967155849fe0fbe808f, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before e52f933598b781d291b9297e39c463536da0e185, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before cafcc1bd62934547c76abf46c6d0d54f135006fe, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before a5401d4c3e2a3d25643c567d26e6de327774a2c9, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 8fe117790b37c84c651e2bad9efc0e7fda73c0e3, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 5d949ea75bb529ea6342e83465938a3b0ac51238, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 915ac3630488af0ca194dc63b86d99802b4f6e18, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before c26ab35702f8cd0cdc78f96aa5856bfb77be798f
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ext4/extents.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49892

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 8f0abb39c16e719129de10596b3ae3363fa178b4, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f921335123f6620c3dce5c96fbb95f18524a021c, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before a23d6029e730f8a151b1a34afb169baac1274583, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c7630935d9a4986e8c0ed91658a781b7a77d73f7, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before bc00d211da4ffad5314a2043b50bdc8ff8a33724, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 3334ab72cbba55a632f24579cd47c4a4e5e69cda, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 4067f4fa0423a89fb19a30b57231b384d77d2610
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/dc/dml/dcn20/display_rq_dlg_calc_20v2.c, drivers/gpu/drm/amd/display/dc/dml/dcn21/display_rq_dlg_calc_21.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49894

Affected technology

simatic s7-1500 tm mfp firmware · 1.1
siemens

debian linux · 11.0
debian

linux kernel · from 4.15 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

sinec os · before 3.2 (exclusive)
siemens

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before b3dfa878257a7e98830b3009ca5831a01d8f85fc, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f5f6d90087131812c1e4b9d3103f400f1624396d, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c130a3c09e3746c1a09ce26c20d21d449d039b1d, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c6979719012a90e5b8e3bc31725fbfdd0b9b2b79, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 2495c8e272d84685403506833a664fad932e453a, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 122e3a7a8c7bcbe3aacddd6103f67f9f36bed473, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 2f5da549535be8ccd2ab7c9abac8562ad370b181, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 07078fa5d589a7fbce8f81ea8acf7aa0021ab38e, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before b7e99058eb2e86aabd7a10761e76cae33d22b49f
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: points, returns
File: drivers/gpu/drm/amd/display/dc/dcn10/dcn10_cm_common.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49896

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49900

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7b24d41d47a6805c45378debf8bd115675d41da8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dac398ed272a378d2f42ac68ae408333a51baf52, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8b1dcf25c26d42e4a68c4725ce52a0543c7878cc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d7444f91a9f93eaa48827087ed0f3381c194181d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6041536d18c5f51a84bc37cd568cbab61870031e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c076b3746224982eebdba5c9e4b1467e146c0d64, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7c244d5b48284a770d96ff703df2dfeadf804a73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8ad8b531de79c348bcb8133e7f5e827b884226af, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2b59ffad47db1c46af25ccad157bb3b25147c35c
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/xattr.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49902

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d76b9a4c283c7535ae7c7c9b14984e75402951e1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 35b91f15f44ce3c01eba058ccb864bb04743e792, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2451e5917c56be45d4add786e2a059dd9c2c37c4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 25d2a3ff02f22e215ce53355619df10cc5faa7ab, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 058aa89b3318be3d66a103ba7c68d717561e1dc6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7fff9a9f866e99931cf6fa260288e55d01626582, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cb0eb10558802764f07de1dc439c4609e27cb4f0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4a7bf6a01fb441009a6698179a739957efd88e38, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d64ff0d2306713ff084d4b09f84ed1a8c75ecc32
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_dmap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49903

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · b40c2e665cd552eae5fbdbb878bc29a34357668e to before 4ac58f7734937f3249da734ede946dfb3b1af5e4, b40c2e665cd552eae5fbdbb878bc29a34357668e to before 3126ccde51f51b0648c8cdccaf916e8bd062e972, b40c2e665cd552eae5fbdbb878bc29a34357668e to before fd026b6b6758d5569705c02540b40f3bbf822b9a, b40c2e665cd552eae5fbdbb878bc29a34357668e to before e7ae14f7ee76c6ef5a48aebab1a278ad78f42619, b40c2e665cd552eae5fbdbb878bc29a34357668e to before 0c238da83f56bb895cab1e5851d034ac45b158d1, b40c2e665cd552eae5fbdbb878bc29a34357668e to before 4218b31ecc7af7e191768d32e32ed4386d8f9b76, b40c2e665cd552eae5fbdbb878bc29a34357668e to before a9603a6f75df2fd8125cd208c98cfaa0fe3f7505, b40c2e665cd552eae5fbdbb878bc29a34357668e to before 95accb7183badca387f7a8d19a2475cf3089f148, b40c2e665cd552eae5fbdbb878bc29a34357668e to before d6c1b3599b2feb5c7291f5ac3a36e5fa7cedb234
Linux

Linux · 3.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_discard.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49924

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49925

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49936

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49938

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · fb9987d0f748c983bb795a86f47522313f701a08 to before e6b9bf32e0695e4f374674002de0527d2a6768eb, fb9987d0f748c983bb795a86f47522313f701a08 to before d1f2fbc6a769081503f6ffedbb5cd1ac497f0e77, fb9987d0f748c983bb795a86f47522313f701a08 to before b02eb7c86ff2ef1411c3095ec8a52b13f68db04f, fb9987d0f748c983bb795a86f47522313f701a08 to before 012ae530afa0785102360de452745d33c99a321b, fb9987d0f748c983bb795a86f47522313f701a08 to before 6a875220670475d9247e576c15dc29823100a4e4, fb9987d0f748c983bb795a86f47522313f701a08 to before e37e348835032d6940ec89308cc8996ded691d2d, fb9987d0f748c983bb795a86f47522313f701a08 to before 2c230210ec0ae6ed08306ac70dc21c24b817bb95, fb9987d0f748c983bb795a86f47522313f701a08 to before a9f4e28e8adaf0715bd4e01462af0a52ee46b01f, fb9987d0f748c983bb795a86f47522313f701a08 to before 94745807f3ebd379f23865e6dab196f220664179
Linux

Linux · 2.6.35
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/ath/ath9k/hif_usb.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49944

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 89bbead9d897c77d0b566349c8643030ff2abeba, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 0e4e2e60556c6ed00e8450b720f106a268d23062, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before dd70c8a89ef99c3d53127fe19e51ef47c3f860fa, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before e7a8442195e8ebd97df467ce4742980ab57edcce, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 9230a59eda0878d7ecaa901d876aec76f57bd455, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before f032e1dac30b3376c7d6026fb01a8c403c47a80d, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 8beee4d8dee76b67c75dc91fd8185d91e845c160
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sctp/socket.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49948

Affected technology

linux kernel · from 3.9 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 1def9238d4aa2146924994aa4b7dc861f03b9362 to before d7d1a28f5dd57b4d83def876f8d7b4403bd37df9, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 473426a1d53a68dd1e718e6cd00d57936993fa6c, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 566a931a1436d0e0ad13708ea55479b95426213c, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 2415f465730e48b6e38da1c7c097317bf5dd2d20, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 27a8fabc54d2f960d47bdfbebf2bdc6e8a92a4c4, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 9b0ee571d20a238a22722126abdfde61f1b2bdd0, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before ff1c3cadcf405ab37dd91418a62a7acecf3bc5e2, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 1eebe602a8d8264a12e35e39d0645fa88dbbacdd, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before ab9a9a9e9647392a19e7a885b08000e89c86b535
Linux

Linux · 3.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/core/dev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49949

Affected technology

linux kernel · from 4.14.256 (inclusive), before 4.19 (exclusive)
linux

linux kernel · from 4.19.218 (inclusive), before 5.4 (exclusive)
linux

linux kernel · from 5.4.162 (inclusive), before 5.10 (exclusive)
linux

linux kernel · from 5.10.82 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.5 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 960b360ca7463921c1a6b72e7066a706d6406223 to before d70ca7598943572d5e384227bd268acb5109bf72, fb2dbc124a7f800cd0e4f901a1bbb769a017104c to before 1598d70ad9c7d0a4d9d54b82094e9f45908fda6d, 8e6bae950da9dc2d2c6c18b1c6b206dc00dc8772 to before ba26060a29d3ca1bfc737aa79f7125128f35147c, 0f810d06b507aa40fef8d1ac0a88e6d0590dbfc3 to before 939c88cbdc668dadd8cfa7a35d9066331239041c, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before d6114993e0a89fde84a60a60a8329a571580b174, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before 25ab0b87dbd89cecef8a9c60a02bb97832e471d1, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before f959cce8a2a04ce776aa8b78e83ce339e0d7fbac, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before 81fd007dcd47c34471766249853e4d4bce8eea4b, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before c20029db28399ecc50e556964eaba75c43b1e2f1, 2128303bff700c857739a0af8cc39c1a41840650, 4.19.218 to before 4.19.323, 5.4.162 to before 5.4.285, 5.10.82 to before 5.10.227, 5.15.5 to before 5.15.168, 4.14.256 to before 4.15
Linux

Linux · 5.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/core/dev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49952

Affected technology

linux kernel · from 4.3 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · d877f07112f1e5a247c6b585c971a93895c9f738 to before 50067d8b3f48e4cd4c9e817d3e9a5b5ff3507ca7, d877f07112f1e5a247c6b585c971a93895c9f738 to before c0add6ed2cf1c4733cd489efc61faeccd3433b41, d877f07112f1e5a247c6b585c971a93895c9f738 to before 531754952f5dfc4b141523088147071d6e6112c4, d877f07112f1e5a247c6b585c971a93895c9f738 to before 38e3fd0c4a2616052eb3c8f4e6f32d1ff47cd663, d877f07112f1e5a247c6b585c971a93895c9f738 to before b40b027a0c0cc1cb9471a13f9730bb2fff12a15b, d877f07112f1e5a247c6b585c971a93895c9f738 to before 4e3542f40f3a94efa59ea328e307c50601ed7065, d877f07112f1e5a247c6b585c971a93895c9f738 to before f839c5cd348201fec440d987cbca9b979bdb4fa7, d877f07112f1e5a247c6b585c971a93895c9f738 to before 752e1924604254f1708f3e3700283a86ebdd325d, d877f07112f1e5a247c6b585c971a93895c9f738 to before 92ceba94de6fb4cee2bf40b485979c342f44a492
Linux

Linux · 4.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/ipv4/netfilter/nf_dup_ipv4.c, net/ipv6/netfilter/nf_dup_ipv6.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49955

Affected technology

linux kernel · from 4.17 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · fa93854f7a7ed63d054405bf3779247d5300edd3 to before 76fb2cbf01571926da8ecf6876cc8cb07d3f5183, fa93854f7a7ed63d054405bf3779247d5300edd3 to before c47843a831e0eae007ad7e848d208e675ba4c132, fa93854f7a7ed63d054405bf3779247d5300edd3 to before da964de4c18199e14b961b5b2e5e6570552a313c, fa93854f7a7ed63d054405bf3779247d5300edd3 to before 07b98400cb0285a6348188aa8c5ec6a2ae0551f7, fa93854f7a7ed63d054405bf3779247d5300edd3 to before ca1fb7942a287b40659cc79551a1de54a2c2e7d5, fa93854f7a7ed63d054405bf3779247d5300edd3 to before ce31847f109c3a5b2abdd19d7bcaafaacfde53de, fa93854f7a7ed63d054405bf3779247d5300edd3 to before ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b, fa93854f7a7ed63d054405bf3779247d5300edd3 to before 9f469ef1c79dac7f9ac1518643a33703918f7e13, fa93854f7a7ed63d054405bf3779247d5300edd3 to before 76959aff14a0012ad6b984ec7686d163deccdc16
Linux

Linux · 4.17
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/acpi/battery.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49957

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49958

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49959

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49962

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49963

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49965

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49966

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49973

Affected technology

linux kernel · from 5.4 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 64648ae8c97ec5a3165021627f5a1658ebe081ca, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 991e8b0bab669b7d06927c3e442b3352532e8581, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 21950321ad33d7613b1453f4c503d7b1871deb61, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before fe44b3bfbf0c74df5712f44458689d0eccccf47d, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 1c723d785adb711496bc64c24240f952f4faaabf, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 92bc8647b4d65f4d4bf8afdb206321c1bc55a486, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 585c048d15ed559f20cb94c8fa2f30077efa4fbc, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before ced8e8b8f40accfcce4a2bbd8b150aa76d5eff9a
Linux

Linux · 5.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/realtek/r8169_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49975

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49981

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49982

Affected technology

linux kernel · from 5.10.214 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.153 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.83 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.23 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7.11 (inclusive), before 6.8.2 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 4.19.311
linux

linux kernel · 5.4.273
linux

linux kernel · 6.12 · update rc1
linux

Linux · ad80c34944d7175fa1f5c7a55066020002921a99 to before 12f7b89dd72b25da4eeaa22097877963cad6418e, 1a54aa506b3b2f31496731039e49778f54eee881 to before a786265aecf39015418e4f930cc1c14603a01490, faf0b4c5e00bb680e8e43ac936df24d3f48c8e65 to before f63461af2c1a86af4217910e47a5c46e3372e645, 7dd09fa80b0765ce68bfae92f4e2f395ccf0fba4 to before 07b418d50ccbbca7e5d87a3a0d41d436cefebf79, 74ca3ef68d2f449bc848c0a814cefc487bf755fa to before bc2cbf7525ac288e07d465f5a1d8cb8fb9599254, eb48680b0255a9e8a9bdc93d6a55b11c31262e62 to before acc5103a0a8c200a52af7d732c36a8477436a3d3, f98364e926626c678fb4b9004b75cacf92ff0662 to before 89d9a69ae0c667e4d9d028028e2dcc837bae626f, f98364e926626c678fb4b9004b75cacf92ff0662 to before 8253a60c89ec35c8f36fb2cc08cdf854c7a3eb58, f98364e926626c678fb4b9004b75cacf92ff0662 to before 6d6e54fc71ad1ab0a87047fd9c211e75d86084a3, 079cba4f4e307c69878226fdf5228c20aa1c969c, a16fbb80064634b254520a46395e36b87ca4731e, 4.19.311 to before 4.19.323, 5.4.273 to before 5.4.285, 5.10.214 to before 5.10.227, 5.15.153 to before 5.15.168, 6.1.83 to before 6.1.113, 6.6.23 to before 6.6.55, 6.7.11 to before 6.8, 6.8.2 to before 6.9
Linux

Linux · 6.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/block/aoe/aoecmd.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49985

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49995

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49996

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49997

Affected technology

linux kernel · from 3.0 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 905f06a34f960676e7dc77bea00f2f8fe18177ad, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 60c068444c20bf9a3e22b65b5f6f3d9edc852931, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 185df159843d30fb71f821e7ea4368c2a3bfcd36, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 469856f76f4802c5d7e3d20e343185188de1e2db, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 2bf4c101d7c99483b8b15a0c8f881e3f399f7e18, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before e66e38d07b31e177ca430758ed97fbc79f27d966, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 1097bf16501ed5e35358d848b0a94ad2830b0f65, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 431b122933b197820d319eb3987a67d04346ce9e, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 45c0de18ff2dc9af01236380404bbd6a46502c69
Linux

Linux · 3.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: zeroes
File: drivers/net/ethernet/lantiq_etop.c

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50006

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 4192adefc9c570698821c5eb9873320eac2fcbf1, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 3c46d6060d3e38de22196c1fe7706c5a3c696285, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 53b1999cfd2c7addf2e581a32865fe8835467b44, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before ef05572da0c0eb89614ed01cc17d3c882bdbd1ff, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 9fedf51ab8cf7b69bff08f37fe0989fec7f5d870, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before d43776b907659affef1de888525847d64b244194, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 6252cb6bde7fc76cb8dcb49d1def7c326b190820, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before d58a00e981d3118b91d503da263e640b7cde6729, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before cc749e61c011c255d81b192a822db650c68b313f
Linux

Linux · 3.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: calling, while, might
File: fs/ext4/migrate.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50007

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50008

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 21f58d200388480547df909b5464b5aafebf299d to before b55c8848fdc81514ec047b2a0ec782ffe9ab5323, 21f58d200388480547df909b5464b5aafebf299d to before f9310a6704bf52e2493480edea896e1f9b795d40, 21f58d200388480547df909b5464b5aafebf299d to before 1756918f51e9ab247a0f4782cc28853c2bb457c1, 21f58d200388480547df909b5464b5aafebf299d to before e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe, 21f58d200388480547df909b5464b5aafebf299d to before 17199b69a84798efffc475040fbef44374ef1de1, 21f58d200388480547df909b5464b5aafebf299d to before fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc, 21f58d200388480547df909b5464b5aafebf299d to before 71267bd4e8c752d7af6c6b96bb83984a6a95273d, 21f58d200388480547df909b5464b5aafebf299d to before a3a12c30f9510f3753286fadbc6cdb7dad78c1d5, 21f58d200388480547df909b5464b5aafebf299d to before 498365e52bebcbc36a93279fe7e9d6aec8479cee
Linux

Linux · 3.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/marvell/mwifiex/fw.h, drivers/net/wireless/marvell/mwifiex/scan.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50024

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50033

Affected technology

linux kernel · from 3.2 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · b5451d783ade99308dfccdf5ca284ed07affa4ff to before ba6501ea06462d6404d57d5644cf2854db38e7d7, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 36b054324d18e51cf466134e13b6fbe3c91f52af, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 5e336384cc9b608e0551f99c3d87316ca3b0e51a, b5451d783ade99308dfccdf5ca284ed07affa4ff to before ff5e0f895315706e4ca5a19df15be6866cee4f5d, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 8bb79eb1db85a10865f0d4dd15b013def3f2d246, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 29e8d96d44f51cf89a62dd042be35d052833b95c, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 7d3fce8cbe3a70a1c7c06c9b53696be5d5d8dd5c
Linux

Linux · 3.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/net/slip/slhc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50035

Affected technology

linux kernel · from 2.6.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4151ec65abd755133ebec687218fadd2d2631167, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8dfe93901b410ae41264087427f3b9f389388f83, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 30d91a478d58cbae3dbaa8224d17d0d839f0d71b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fadf8fdb3110d3138e05c3765f645535434f8d76, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ce249a4c68d0ce27a8c5d853338d502e2711a314, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8fe992ff3df493d1949922ca234419f3ede08dff, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c007a14797240607038bd3464501109f408940e2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40dddd4b8bd08a69471efd96107a4e1c73fabefc
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/net/ppp/ppp_async.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50039

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 175f9c1bba9b825d22b142d183c9e175488b260c to before 2acbb9539bc2284e30d2aeb789c3d96287014264, 175f9c1bba9b825d22b142d183c9e175488b260c to before adbc3eef43fc94c7c8436da832691ae02333a972, 175f9c1bba9b825d22b142d183c9e175488b260c to before 8fb6503592d39065316f45d267c5527b4e7cd995, 175f9c1bba9b825d22b142d183c9e175488b260c to before 76feedc74b90270390fbfdf74a2e944e96872363, 175f9c1bba9b825d22b142d183c9e175488b260c to before 1edf039ee01788ffc25625fe58a903ae2efa213e, 175f9c1bba9b825d22b142d183c9e175488b260c to before 3dc6ee96473cc2962c6db4297d4631f261be150f, 175f9c1bba9b825d22b142d183c9e175488b260c to before 3cb7cf1540ddff5473d6baeb530228d19bc97b8a
Linux

Linux · 2.6.27
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: include/net/sch_generic.h, net/sched/sch_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50040

Affected technology

linux kernel · from 4.14.322 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.291 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.251 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.188 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.150 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.42 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.4.7 (inclusive), before 6.5 (exclusive)
linux

linux kernel · from 6.5 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 124e39a734cb90658b8f0dc110847bbfc6e33792 to before dca2ca65a8695d9593e2cf1b40848e073ad75413, c9f56f3c7bc908caa772112d3ae71cdd5d18c257 to before c92cbd283ddcf55fd85a9a9b0ba13298213f3dd7, 994c2ceb70ea99264ccc6f09e6703ca267dad63c to before d79af3af2f49c6aae9add3d492c04d60c1b85ce4, fa92c463eba75dcedbd8d689ffdcb83293aaa0c3 to before 0a94079e3841d00ea5abb05e3233d019a86745f6, 39695e87d86f0e7d897fba1d2559f825aa20caeb to before 6a39c8f5c8aae74c5ab2ba466791f59ffaab0178, 004d25060c78fc31f66da0fa439c544dda1ac9d5 to before 57c5053eaa5f9a8a99e34732e37a86615318e464, 004d25060c78fc31f66da0fa439c544dda1ac9d5 to before 500be93c5d53b7e2c5314292012185f0207bad0c, 004d25060c78fc31f66da0fa439c544dda1ac9d5 to before 330a699ecbfc9c26ec92c6310686da1230b4e7eb, c2312e1d12b1c3ee4100c173131b102e2aed4d04, 41f63b72a01c0e0ac59ab83fd2d921fcce0f602d, 4.19.291 to before 4.19.323, 5.4.251 to before 5.4.285, 5.10.188 to before 5.10.227, 5.15.150 to before 5.15.168, 6.1.42 to before 6.1.113, 4.14.322 to before 4.15, 6.4.7 to before 6.5
Linux

Linux · 6.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/intel/igb/igb_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50044

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 3241ad820dbb172021e0268b5611031991431626 to before b77b3fb12fd483cae7c28648903b1d8a6b275f01, 3241ad820dbb172021e0268b5611031991431626 to before 869c6ee62ab8f01bf2419e45326642be5c9b670a, 3241ad820dbb172021e0268b5611031991431626 to before ef44274dae9b0a90d1a97ce8b242a3b8243a7745, 3241ad820dbb172021e0268b5611031991431626 to before 496b2ab0fd10f205e08909a125485fdc98843dbe, 3241ad820dbb172021e0268b5611031991431626 to before ced98072d3511b232ae1d3347945f35f30c0e303, 3241ad820dbb172021e0268b5611031991431626 to before 38b2d5a57d125e1c17661b8308c0240c4a43b534, 3241ad820dbb172021e0268b5611031991431626 to before 4cb9807c9b53bf1e5560420d26f319f528b50268, 3241ad820dbb172021e0268b5611031991431626 to before 08d1914293dae38350b8088980e59fbc699a72fe
Linux

Linux · 2.6.27
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/bluetooth/rfcomm/sock.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 3.3/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50045

Affected technology

linux kernel · from 4.11 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before f07131239a76cc10d5e82c19d91f53cb55727297, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 75dfcb758015c97e1accd6340691fca67d363bed, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before cce8419b8168f6e7eb637103a47f916f3de8bc81, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 95c0cff5a1a5d28bf623b92eb5d1a8f56ed30803, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 78ed917133b118661e1fe62d4a85d5d428ee9568, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 3453f5839420bfbb85c86c61e49f49ffd0f041c4, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 915717e0bb9837cc5c101bc545af487bd787239e, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before f9ff7665cd128012868098bbd07e28993e314fdb
Linux

Linux · 4.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/bridge/br_netfilter_hooks.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50051

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50059

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50074

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50082

Affected technology

linux kernel · from 4.19 (inclusive), before 5.10.228 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.169 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.114 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.58 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.5 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before d04b72c9ef2b0689bfc1057d21c4aeed087c329f, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before 3bc6d0f8b70a9101456cf02ab99acb75254e1852, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before 455a469758e57a6fe070e3e342db12e4a629e0eb, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before b5e900a3612b69423a0e1b0ab67841a1fb4af80f, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before 4c5b123ab289767afe940389dbb963c5c05e594e, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before 04f283fc16c8d5db641b6bffd2d8310aa7eccebc, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before e972b08b91ef48488bae9789f03cfedb148667fb
Linux

Linux · 4.19
Linux

Component: Not specified by the source
File: block/blk-rq-qos.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50096

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50099

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50116

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50117

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50127

Affected technology

linux kernel · from 5.2 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 2f868ce6013548a713c431c679ef73747a66fcf3, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 8a283a19026aaae8a773fd8061263cfa315b127f, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 999612996df28d81f163dad530d7f8026e03aec6, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before fe371f084073e8672a2d7d46b335c3c060d1e301, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 0d4c0d2844e4eac3aed647f948fd7e60eea56a61, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 2240f9376f20f8b6463232b4ca7292569217237f, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before f504465970aebb2467da548f7c1efbbf36d0f44b
Linux

Linux · 5.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/sched/sch_taprio.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2024-50131

Affected technology

linux kernel · from 5.1 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before 5e3231b352725ff4a3a0095e6035af674f2d8725, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before 02874ca52df2ca2423ba6122039315ed61c25972, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before b86b0d6eea204116e4185acc35041ca4ff11a642, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before f4ed40d1c669bba1a54407d8182acdc405683f29, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before a14a075a14af8d622c576145455702591bdde09d, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before 5fd942598ddeed9a212d1ff41f9f5b47bcc990a7, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before 0b6e2e22cb23105fcb171ab92f0f7516c69c8471
Linux

Linux · 5.1
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: kernel/trace/trace_probe.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50134

Affected technology

linux kernel · before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · dd55d44f408419278c00887bfcb2261d0caae350 to before 02c86c5d5ef4bbba17d38859c74872825f536617, dd55d44f408419278c00887bfcb2261d0caae350 to before 75f828e944dacaac8870418461d3d48a1ecf2331, dd55d44f408419278c00887bfcb2261d0caae350 to before 34a422274b693507025a7db21519865d1862afcb, dd55d44f408419278c00887bfcb2261d0caae350 to before 7458a6cdaebb3dc59af8578ee354fae78a154c4a, dd55d44f408419278c00887bfcb2261d0caae350 to before 9eb32bd23bbcec44bcbef27b7f282b7a7f3d0391, dd55d44f408419278c00887bfcb2261d0caae350 to before fae9dc12c61ce23cf29d09824a741b7b1ff8f01f, dd55d44f408419278c00887bfcb2261d0caae350 to before d92b90f9a54d9300a6e883258e79f36dab53bfae
Linux

Linux · 4.13
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/gpu/drm/vboxvideo/hgsmi_base.c, drivers/gpu/drm/vboxvideo/vboxvideo.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50142

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f31398570acf0f0804c644006f7bfa9067106b0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 401ad99a5ae7180dd9449eac104cb755f442e7f3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8df5cd51fd70c33aa1776e5cbcd82b0a86649d73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2d08a6c31c65f23db71a5385ee9cf9d8f9a67a71, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bce1afaa212ec380bf971614f70909a27882b862, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d9868180bd1e4cf37e7c5067362658971162366, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e68dd80ba498265d2266b12dc3459164f4ff0c4a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3f0ab59e6537c6a8f9e1b355b48f9c05a76e8563
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/xfrm/xfrm_user.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50143

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50148

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e232728242c4e98fb30e4c6bedb6ba8b482b6301, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2c439470b23d78095a0d2f923342df58b155f669, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6c151aeb6dc414db8f4daf51be072e802fae6667, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa58e23ea1359bd24b323916d191e2e9b4b19783, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 03015b6329e6de42f03ec917c25c4cf944f81f66, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d10cd7bf574ead01fae140ce117a11bcdacbe6a8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 20c424bc475b2b2a6e0e2225d2aae095c2ab2f41, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 64a90991ba8d4e32e3173ddd83d0b24167a5668c
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/bluetooth/bnep/core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50150

Affected technology

linux kernel · from 4.19 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 2b0b33e8a58388fa9078f0fbe9af1900e6b08879, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 2c15c4133d00f5da632fce60ed013fc31aa9aa58, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 6af43ec3bf40f8b428d9134ffa7a291aecd60da8, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 87474406056891e4fdea0794e1f632b21b3dfa27, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before bee1b68cb8bcee4fd3a8bde3a4886e0b1375dc4d, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 1ded6b12499e6dee9b0e1ceac633be36538f6fc2, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 68a7c7fe322546be1464174c8d85874b8161deda, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before befab3a278c59db0cc88c8799638064f6d3fd6f8
Linux

Linux · 4.19
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/usb/typec/class.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50151

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · e77fe73c7e38c36145825d84cfe385d400aba4fd to before 6f0516ef1290da24b85461ed08a0938af7415e49, e77fe73c7e38c36145825d84cfe385d400aba4fd to before ed31aba8ce93472d9e16f5cff844ae7c94e9601d, e77fe73c7e38c36145825d84cfe385d400aba4fd to before e07d05b7f5ad9a503d9cab0afde2ab867bb65470, e77fe73c7e38c36145825d84cfe385d400aba4fd to before 2ef632bfb888d1a14f81c1703817951e0bec5531, e77fe73c7e38c36145825d84cfe385d400aba4fd to before b209c3a0bc3ac172265c7fa8309e5d00654f2510, e77fe73c7e38c36145825d84cfe385d400aba4fd to before fe92ddc1c32d4474e605e3a31a4afcd0e7d765ec, e77fe73c7e38c36145825d84cfe385d400aba4fd to before 1ab60323c5201bef25f2a3dc0ccc404d9aca77f1
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/smb/client/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50167

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50168

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50171

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50179

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50180

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50184

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50194

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50195

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50199

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50202

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50205

Affected technology

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 826b5de90c0bca4e9de6231da9e1730480621588 to before d575414361630b8b0523912532fcd7c79e43468c, 826b5de90c0bca4e9de6231da9e1730480621588 to before 5e431f85c87bbffd93a9830d5a576586f9855291, 826b5de90c0bca4e9de6231da9e1730480621588 to before 7d4eb9e22131ec154e638cbd56629195c9bcbe9a, 826b5de90c0bca4e9de6231da9e1730480621588 to before d2826873db70a6719cdd9212a6739f3e6234cfc4, 826b5de90c0bca4e9de6231da9e1730480621588 to before 4bdc21506f12b2d432b1f2667e5ff4c75eee58e3, 826b5de90c0bca4e9de6231da9e1730480621588 to before 3452d39c4704aa12504e4190298c721fb01083c3, 826b5de90c0bca4e9de6231da9e1730480621588 to before 72cafe63b35d06b5cfbaf807e90ae657907858da
Linux

Linux · 4.20
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: sound/firewire/amdtp-stream.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50218

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50229

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50230

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50233

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50234

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50236

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50237

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50251

Affected technology

linux kernel · from 4.5 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.171 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.116 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.60 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.7 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

Linux · 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before a661ed364ae6ae88c2fafa9ddc27df1af2a73701, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before e3e608cbad376674d19a71ccd0d41804d9393f02, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before b1d2de8a669fa14c499a385e056944d5352b3b40, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before d3217323525f7596427124359e76ea0d8fcc9874, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before 0ab3be58b45b996764aba0187b46de19b3e58a72, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before c43e0ea848e7b9bef7a682cbc5608022d6d29d7b, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before d5953d680f7e96208c29ce4139a0e38de87a57fe
Linux

Linux · 4.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/netfilter/nft_payload.c

Attack conditions (NVD, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 6.2/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50262

Affected technology

linux kernel · from 4.16 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.171 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.116 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.60 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.7 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

Linux · b471f2f1de8b816f1e799b80aa92588f3566e4bd to before e8494ac079814a53fbc2258d2743e720907488ed, b471f2f1de8b816f1e799b80aa92588f3566e4bd to before 91afbc0eb3c90258ae378ae3c6ead3d2371e926d, b471f2f1de8b816f1e799b80aa92588f3566e4bd to before 590976f921723d53ac199c01d5b7b73a94875e68, b471f2f1de8b816f1e799b80aa92588f3566e4bd to before 86c8ebe02d8806dd8878d0063e8e185622ab6ea6, b471f2f1de8b816f1e799b80aa92588f3566e4bd to before a035df0b98df424559fd383e8e1a268f422ea2ba, b471f2f1de8b816f1e799b80aa92588f3566e4bd to before 90a6e0e1e151ef7a9282e78f54c3091de2dcc99c, b471f2f1de8b816f1e799b80aa92588f3566e4bd to before c4b4f9a9ab82238cb158fa4fe61a8c0ae21a4980, b471f2f1de8b816f1e799b80aa92588f3566e4bd to before 13400ac8fb80c57c2bfb12ebd35ee121ce9b4d21
Linux

Linux · 4.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: kernel/bpf/lpm_trie.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50265

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50267

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50269

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50273

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50278

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50279

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50282

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50287

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50290

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50296

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50299

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.324 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.286 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.230 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.172 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.117 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.61 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.8 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 67b9a278b80f71ec62091ded97c6bcbea33b5ec3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9b5d42aeaf1a52f73b003a33da6deef7df34685f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40b283ba76665437bc2ac72079c51b57b25bff9e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a758aa6a773bb872196bcc3173171ef8996bddf0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bf9bff13225baf5f658577f7d985fc4933d79527, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d3fb3cc83cf313e4f87063ce0f3fea76b071567b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8820d2d6589f62ee5514793fff9b50c9f8101182, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0ead60804b64f5bd6999eec88e503c6a1a242d41
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sctp/sm_statefuns.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50301

Affected technology

linux kernel · from 3.13 (inclusive), before 4.19.324 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.286 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.230 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.172 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.117 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.61 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.8 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

Linux · b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before c3ce634ad953ce48c75c39bdfd8b711dd95f346f, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 4efb69a0e294ef201bcdf7ce3d6202cd0a545a5d, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 1e4332581cd4eed75aea77af6f66cdcdda8b49b9, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 199c20fb7499c79557a075dc24e9a7dae7d9f1ce, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before bbad2d5b6c99db468d8f88b6ba6a56ed409b4881, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 3e79ad156bedf2da0ab909a118d2cec6c9c22b79, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before e0a317ad68e4ea48a0158187238c5407e4fdec8b, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 4a74da044ec9ec8679e6beccc4306b936b62873f
Linux

Linux · 3.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: security/keys/keyring.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50302

Affected technology

android · Version not applicable in the source CPE
google

debian linux · 11.0
debian

simatic s7-1500 tm mfp firmware · Version not applicable in the source CPE
siemens

sinec os · before 3.2 (exclusive)
siemens

linux kernel · from 3.12 (inclusive), before 4.19.324 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.286 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.230 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.172 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.117 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.61 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.8 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

Linux · 27ce405039bfe6d3f4143415c638f56a3df77dca to before e7ea60184e1e88a3c9e437b3265cbb6439aa7e26, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 3f9e88f2672c4635960570ee9741778d4135ecf5, 27ce405039bfe6d3f4143415c638f56a3df77dca to before d7dc68d82ab3fcfc3f65322465da3d7031d4ab46, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 05ade5d4337867929e7ef664e7ac8e0c734f1aaf, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 9d9f5c75c0c7f31766ec27d90f7a6ac673193191, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 492015e6249fbcd42138b49de3c588d826dd9648, 27ce405039bfe6d3f4143415c638f56a3df77dca to before 177f25d1292c7e16e1199b39c85480f7f8815552, b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7, fe6c9b48ebc920ff21c10c50ab2729440c734254, 3.10.16 to before 3.11, 3.11.5 to before 3.12
Linux

Linux · 3.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/hid/hid-core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as high; integrity and availability impact as none. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-52332

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 2.6.29
linux

linux kernel · 2.6.29 · update rc4
linux

linux kernel · 2.6.29 · update rc5
linux

linux kernel · 2.6.29 · update rc6
linux

linux kernel · 2.6.29 · update rc7
linux

linux kernel · 2.6.29 · update rc8
linux

linux kernel · 6.13 · update rc1
linux

Linux · bbd98fe48a43464b4a044bc4cbeefad284d6aa80 to before 4458046617dfadc351162dbaea1945c57eebdf36, bbd98fe48a43464b4a044bc4cbeefad284d6aa80 to before e0155b1b1509d0ef4799bd1cd73309ca466df3f3, bbd98fe48a43464b4a044bc4cbeefad284d6aa80 to before 4fe517643f529e805bb6b890a4331c100e8f2484, bbd98fe48a43464b4a044bc4cbeefad284d6aa80 to before 8009cdcc493fa30d4572016daf2d6999da4d6c54, bbd98fe48a43464b4a044bc4cbeefad284d6aa80 to before f309733a8c9da7d4266a8a3755020b738a570cae, bbd98fe48a43464b4a044bc4cbeefad284d6aa80 to before 992fd34122de377b45cb75b64fc7f17fc1e6ed2f, bbd98fe48a43464b4a044bc4cbeefad284d6aa80 to before 0566f83d206c7a864abcd741fe39d6e0ae5eef29
Linux

Linux · 2.6.29
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/intel/igb/igb_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53059

Affected technology

linux kernel · from 5.1 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.171 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.116 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.60 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.7 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

Linux · f130bb75d8817c560b48c4d1a0e5279968a0859d to before 9c98ee7ea463a838235e7a0e35851b38476364f2, f130bb75d8817c560b48c4d1a0e5279968a0859d to before 45a628911d3c68e024eed337054a0452b064f450, f130bb75d8817c560b48c4d1a0e5279968a0859d to before 3f45d590ccbae6dfd6faef54efe74c30bd85d3da, f130bb75d8817c560b48c4d1a0e5279968a0859d to before 64d63557ded6ff3ce72b18ab87a6c4b1b652161c, f130bb75d8817c560b48c4d1a0e5279968a0859d to before 3eb986c64c6bfb721950f9666a3b723cf65d043f, f130bb75d8817c560b48c4d1a0e5279968a0859d to before 9480c3045f302f43f9910d2d556d6cf5a62c1822, f130bb75d8817c560b48c4d1a0e5279968a0859d to before 07a6e3b78a65f4b2796a8d0d4adb1a15a81edead
Linux

Linux · 5.1
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/intel/iwlwifi/mvm/fw.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53061

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53063

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53066

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53101

Affected technology

linux kernel · before 4.19.324 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.286 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.230 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.173 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.118 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.62 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.9 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

linux kernel · 6.12 · update rc7
linux

Linux · 468eedde23d6c9335935773f4f5764267d5a7763 to before a0c77e5e3dcbffc7c6080ccc89c037f0c86496cf, 468eedde23d6c9335935773f4f5764267d5a7763 to before 17ecb40c5cc7755a321fb6148cba5797431ee5b8, 468eedde23d6c9335935773f4f5764267d5a7763 to before 9db25c2b41c34963c3ccf473b08171f87670652e, 468eedde23d6c9335935773f4f5764267d5a7763 to before b3e612bd8f64ce62e731e95f635e06a2efe3c80c, 468eedde23d6c9335935773f4f5764267d5a7763 to before 5a72b0d3497b818d8f000c347a7c11801eb27bfc, 468eedde23d6c9335935773f4f5764267d5a7763 to before 1cb5bfc5bfc651982b6203c224d49b7ddacf28bc, 468eedde23d6c9335935773f4f5764267d5a7763 to before 1c28bca1256aecece6e94b26b85cd07e08b0dc90, 468eedde23d6c9335935773f4f5764267d5a7763 to before 15f34347481648a567db67fb473c23befb796af5
Linux

Linux · 2.6.39
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ocfs2/file.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53104

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53112

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53121

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53124

Affected technology

linux kernel · from 4.4 (inclusive), before 6.11.10 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

linux kernel · 6.12 · update rc7
linux

Linux · e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before 695fb0b9aecfd5dd5b2946ba8897ac2c1eef654d, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before fe2c0bd6d1e29ccefdc978b9a290571c93c27473, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before c3d052cae566ec2285f5999958a5deb415a0f59e, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before be7c61ea5f816168c38955eb4e898adc8b4b32fd, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before 3f51f8c9d28954cf380100883a02eed35a8277e9, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before d285eb9d0641c8344f2836081b4ccb7b3c5cc1b6, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before 073d89808c065ac4c672c0a613a71b27a80691cb
Linux

Linux · 4.4
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - BIOS · 0 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/dccp/ipv6.c, net/ipv6/tcp_ipv6.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53127

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53130

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53131

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53135

Affected technology

linux kernel · from 5.0 (inclusive), before 6.1.119 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.63 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.10 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

linux kernel · 6.12 · update rc7
linux

Linux · f99e3daf94ff35dd4a878d32ff66e1fd35223ad6 to before c3742319d021f5aa3a0a8c828485fee14753f6de, f99e3daf94ff35dd4a878d32ff66e1fd35223ad6 to before d4b42f926adcce4e5ec193c714afd9d37bba8e5b, f99e3daf94ff35dd4a878d32ff66e1fd35223ad6 to before b8a1d572478b6f239061ee9578b2451bf2f021c2, f99e3daf94ff35dd4a878d32ff66e1fd35223ad6 to before e6716f4230a8784957273ddd27326264b27b9313, f99e3daf94ff35dd4a878d32ff66e1fd35223ad6 to before d28b059ee4779b5102c5da6e929762520510e406, f99e3daf94ff35dd4a878d32ff66e1fd35223ad6 to before b91bb0ce5cd7005b376eac690ec664c1b56372ec, f99e3daf94ff35dd4a878d32ff66e1fd35223ad6 to before aa0d42cacf093a6fcca872edc954f6f812926a17
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: arch/x86/kvm/vmx/vmx.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53138

Affected technology

linux kernel · from 5.4 (inclusive), before 6.1.119 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.63 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.10 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

linux kernel · 6.12 · update rc7
linux

Linux · 84d1bb2b139e0184b1754aa1b5776186b475fce8 to before a0ddb20a748b122ea86003485f7992fa5e84cc95, 84d1bb2b139e0184b1754aa1b5776186b475fce8 to before ffad2ac8c859c1c1a981fe9c4f7ff925db684a43, 84d1bb2b139e0184b1754aa1b5776186b475fce8 to before c7b97f9e794d8e2bbaa50e1d6c230196fd214b5e, 84d1bb2b139e0184b1754aa1b5776186b475fce8 to before 69fbd07f17b0fdaf8970bc705f5bf115c297839d, 84d1bb2b139e0184b1754aa1b5776186b475fce8 to before 93a14620b97c911489a5b008782f3d9b0c4aeff4, 84d1bb2b139e0184b1754aa1b5776186b475fce8 to before 2723e8b2cbd486cb96e5a61b22473f7fd62e18df, 84d1bb2b139e0184b1754aa1b5776186b475fce8 to before dd6e972cc5890d91d6749bb48e3912721c4e4b25
Linux

Linux · 5.4
Linux

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlx5/core/en_accel/ktls_tx.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53140

Affected technology

linux kernel · from 4.4.38 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.8.14 (inclusive), before 4.9 (exclusive)
linux

linux kernel · from 4.9 (inclusive), before 6.1.119 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.63 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.10 (exclusive)
linux

Linux · ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 114a61d8d94ae3a43b82446cf737fd757021b834, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 598c956b62699c3753929602560d8df322e60559, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 6e3f2c512d2b7dbd247485b1dd9e43e4210a18f4, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before d2fab3d66cc16cfb9e3ea1772abe6b79b71fa603, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 4e87a52133284afbd40fb522dbf96e258af52a98, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before bbc769d2fa1b8b368c5fbe013b5b096afa3c05ca, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 176c41b3ca9281a9736b67c6121b03dbf0c8c08f, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 1904fb9ebf911441f90a68e96b22aa73e4410505, baaf0c65bc8ea9c7a404b09bc8cc3b8a1e4f18df, 25d9b4bb64ea964769087fc5ae09aee9c838d759, 4.4.38 to before 4.5, 4.8.14 to before 4.9
Linux

Linux · 4.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/netlink/af_netlink.c, net/netlink/af_netlink.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

But also means that the user can close the socket without getting to the end of the dump. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.

CVE-2024-53142

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53145

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53146

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53148

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53150

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53155

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53156

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53157

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53158

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53161

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53165

Affected technology

linux kernel · from 2.6.30 (inclusive), before 4.19.325 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 3c7c806b3eafd94ae0f77305a174d63b69ec187c, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 971b4893457788e0e123ea552f0bb126a5300e61, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before c3f4f4547fb291982f5ef56c048277c4d5ccc4e4, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before c43df7dae28fb9fce96ef088250c1e3c3a77c527, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before b8b84dcdf3ab1d414304819f824b10efba64132c, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 6ba6e19912570b2ad68298be0be1dc779014a303, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 588bdec1ff8b81517dbae0ae51c9df52c0b952d3, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 63e72e551942642c48456a4134975136cdcb9b3c
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/sh/intc/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.4/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2024-53171

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53172

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53173

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53174

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53181

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53183

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53184

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53194

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53197

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53198

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53214

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53217

Affected technology

linux kernel · from 2.6.38 (inclusive), before 4.19.325 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before d9a0d1f6e15859ea7a86a327f28491e23deaaa62, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before cac1405e3ff6685a438e910ad719e0cf06af90ee, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 752a75811f27300fe8131b0a1efc91960f6f88e7, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before c5d90f9302742985a5078e42ac38de42c364c44a, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 0c3b0e326f838787d229314d4de83af9c53347e8, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before eb51733ae5fc73d95bd857d5da26f9f65b202a79, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 03178cd8f67227015debb700123987fe96275cd1, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 4a4ffc1aa9d618e41ad9151f40966e402e58a5a2, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 1e02c641c3a43c88cecc08402000418e15578d38
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4callback.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53227

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53239

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53680

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53690

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-55916

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56531

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56532

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56539

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56548

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56558

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56562

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56567

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56569

Affected technology

linux kernel · from 4.12 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.4 (exclusive)
linux

Linux · 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 43ca32ce12888fb0eeb2d74dfc558dea60d3473e, 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 5dabb7af57bc72308a6e2e81a5dd756eef283803, 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 885109aa0c70639527dd6a65c82e63c9ac055e3d, 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 7ae27880de3482e063fcc1f72d9a298d0d391407, 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 8a92dc4df89c50bdb26667419ea70e0abbce456e, 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 19cacabdd5a8487ae566cbecb4d03bcb038a067e, 04ec7bb642b77374b53731b795b5654b5aff1c00 to before 45af52e7d3b8560f21d139b3759735eead8b1653
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: kernel/trace/ftrace.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56570

Affected technology

linux kernel · before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.4 (exclusive)
linux

Linux · e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before f9248e2f73fb4afe08324485e98c815ac084d166, e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before 5f86e79c0b2287ffdabe6c1b305a36c4e0f40fe3, e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before 749eac5a6687ec99116e0691d0d71225254654e3, e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before ff43d008bbf9b27ada434d6455f039a5ef6cee53, e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before 065bf5dd21639f80e68450de16bda829784dbb8c, e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before 72014e7745cc8250bb8f27bd78694dfd3f1b5773, e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before c8b359dddb418c60df1a69beea01d1b3322bfe83
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: Add, to
File: fs/overlayfs/util.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56572

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56574

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56576

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56581

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56586

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56587

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56593

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56594

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56595

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56596

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56597

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56598

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56600

Affected technology

linux kernel · before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f2709d1271cfdf55c670ab5c5982139ab627ddc7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 35360255ca30776dee34d9fa764cffa24d0a5f65, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 276a473c956fb55a6f3affa9ff232e10fffa7b43, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 79e16a0d339532ea832d85798eb036fc4f9e0cea, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 706b07b7b37f886423846cb38919132090bc40da, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f44fceb71d72d29fb00e0ac84cdf9c081b03cd06, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9df99c395d0f55fb444ef39f4d6f194ca437d884
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/ipv6/af_inet6.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2024-56601

Affected technology

linux kernel · before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f8a3f255f7509a209292871715cda03779640c8d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2bc34d8c8898ae9fddf4612501aabb22d76c2b2c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e8258070b0f2aba66b3ef18883de229674fb288, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b4513cfd3a10c03c660d5d3d26c2e322efbfdd9b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 25447c6aaa7235f155292b0c58a067347e8ae891, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 691d6d816f93b2a1008c14178399061466e674ef, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9365fa510c6f82e3aa550a09d0c5c6b44dbc78ff
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/ipv4/af_inet.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56602

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56603

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56605

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56606

Affected technology

linux kernel · before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

Linux · b013840810c221f2b0cf641d01531526052dc1fb to before 71b22837a5e55ac27d6a14b9cdf2326587405c4f, b013840810c221f2b0cf641d01531526052dc1fb to before 1dc1e1db927056cb323296e2294a855cd003dfe7, b013840810c221f2b0cf641d01531526052dc1fb to before 132e615bb1d7cdec2d3cfbdec2efa630e923fd21, b013840810c221f2b0cf641d01531526052dc1fb to before a6cf750b737374454a4e03a5ed449a3eb0c96414, b013840810c221f2b0cf641d01531526052dc1fb to before 157f08db94123e2ba56877dd0ac88908b13a5dd0, b013840810c221f2b0cf641d01531526052dc1fb to before fd09880b16d33aa5a7420578e01cd79148fa9829, b013840810c221f2b0cf641d01531526052dc1fb to before 46f2a11cb82b657fd15bab1c47821b635e03838b
Linux

Linux · 3.14
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/packet/af_packet.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2024-56614

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56615

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56619

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56629

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56630

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56631

Affected technology

linux kernel · from 3.16.85 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · cc833acbee9db5ca8c6162b015b4c93863c6f821 to before e19acb1926c4a1f30ee1ec84d8afba2d975bd534, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 285ce1f89f8d414e7eecab5ef5118cd512596318, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 198b89dd5a595ee3f96e5ce5c448b0484cd0e53c, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 275b8347e21ab8193e93223a8394a806e4ba8918, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 59b30afa578637169e2819536bb66459fdddc39d, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 1f5e2f1ca5875728fcf62bc1a054707444ab4960, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before f10593ad9bc36921f623361c9e3dd96bd52d85ee, 3a27c0defb0315760100f8b1adc7c4acbe04c884, 3.16.85 to before 3.17
Linux

Linux · 3.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: kref_put
File: drivers/scsi/sg.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56633

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56634

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56637

Affected technology

linux kernel · from 2.6.39 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · a7b4f989a629493bb4ec4a354def784d440b32c4 to before e5e2d3024753fdaca818b822e3827614bacbdccf, a7b4f989a629493bb4ec4a354def784d440b32c4 to before 6099b5d3e37145484fac4b8b4070c3f1abfb3519, a7b4f989a629493bb4ec4a354def784d440b32c4 to before 0e67805e805c1f3edd6f43adbe08ea14b552694b, a7b4f989a629493bb4ec4a354def784d440b32c4 to before 5bae60a933ba5d16eed55c6b279be51bcbbc79b0, a7b4f989a629493bb4ec4a354def784d440b32c4 to before 90bf312a6b6b3d6012137f6776a4052ee85e0340, a7b4f989a629493bb4ec4a354def784d440b32c4 to before ba5e070f36682d07ca7ad2a953e6c9d96be19dca, a7b4f989a629493bb4ec4a354def784d440b32c4 to before 456f010bfaefde84d3390c755eedb1b0a5857c3c
Linux

Linux · 2.6.39
Linux

Component: Not specified by the source
File: net/netfilter/ipset/ip_set_core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56642

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56643

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56644

Affected technology

linux kernel · from 2.6.33.2 (inclusive), before 2.6.34 (exclusive)
linux

linux kernel · from 2.6.34.1 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 2.6.34
linux

linux kernel · 2.6.34 · update rc3
linux

linux kernel · 2.6.34 · update rc4
linux

linux kernel · 2.6.34 · update rc5
linux

linux kernel · 2.6.34 · update rc6
linux

linux kernel · 2.6.34 · update rc7
linux

linux kernel · 6.13 · update rc1
linux

debian linux · 11.0
debian

Linux · 54c1a859efd9fd6cda05bc700315ba2519c14eba to before a95808252e8acc0123bacd2dff8b9af10bc145b7, 54c1a859efd9fd6cda05bc700315ba2519c14eba to before b90d061345bb8cd51fece561a800bae1c95448a6, 54c1a859efd9fd6cda05bc700315ba2519c14eba to before 0b8903e6c881f72c6849d4952de742c656eb5ab9, 54c1a859efd9fd6cda05bc700315ba2519c14eba to before 535add1e9f274502209cb997801208bbe1ae6c6f, 54c1a859efd9fd6cda05bc700315ba2519c14eba to before f43d12fd0fa8ee5b9caf8a3927e10d06431764d2, 54c1a859efd9fd6cda05bc700315ba2519c14eba to before 8b591bd522b71c42a82898290e35d32b482047e4, 54c1a859efd9fd6cda05bc700315ba2519c14eba to before 3301ab7d5aeb0fe270f73a3d4810c9d1b6a9f045, 9c93e9c757c7d3d96027a06b9b4c4e37ca87ded7, 2.6.33.2 to before 2.6.34
Linux

Linux · 2.6.34
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: is
File: net/ipv6/route.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56645

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56650

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · 268cb38e1802db560c73167e643f14a3dcb4b07c to before 147a42bb02de8735cb08476be6d0917987d022c2, 268cb38e1802db560c73167e643f14a3dcb4b07c to before ad28612ebae1fcc1104bd432e99e99d87f6bfe09, 268cb38e1802db560c73167e643f14a3dcb4b07c to before 36a9d94dac28beef6b8abba46ba8874320d3e800, 268cb38e1802db560c73167e643f14a3dcb4b07c to before ab9916321c95f5280b72b4c5055e269f98627efe, 268cb38e1802db560c73167e643f14a3dcb4b07c to before a9bcc0b70d9baf3ff005874489a0dc9d023b54c3, 268cb38e1802db560c73167e643f14a3dcb4b07c to before c40c96d98e536fc1daaa125c2332b988615e30a4, 268cb38e1802db560c73167e643f14a3dcb4b07c to before 04317f4eb2aad312ad85c1a17ad81fe75f1f9bc7
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/netfilter/xt_LED.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56659

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56670

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56681

Affected technology

linux kernel · from 4.11 (inclusive), before 4.19.325 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 8f1a9a960b1107bd0e0ec3736055f5ed0e717edf, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 75e1e38e5d80d6d9011b7322698ffba3dd3db30a, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 28f8ffa945f7d7150463e15097ea73b19529d6f5, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 4ea3e3b761e371102bb1486778e2f8dbc9e37413, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 05f0a3f5477ecaa1cf46448504afe9e7c2e96fcc, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ae5253313e0ea5f00c06176074592b7f493c8546, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ee36db8e8203420e6d5c42eb9428920c2fc36532, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before bba9e38c5ad41d0a88b22a59e5b6dd3e31825118, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 19630cf57233e845b6ac57c9c969a4888925467b
Linux

Linux · 4.11
Linux

Component: Not specified by the source
Function: The
File: drivers/crypto/bcm/cipher.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56688

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56690

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56691

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56694

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56700

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56704

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56720

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56723

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56724

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56739

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56746

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56747

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56748

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56756

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56767

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56769

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56770

Affected technology

linux kernel · from 3.3 (inclusive), before 5.4.288 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.232 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.175 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.121 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.67 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.6 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

Linux · 50612537e9ab29693122fab20fc1eed235054ffe to before 83c6ab12f08dcc09d4c5ac86fdb89736b28f1d31, 50612537e9ab29693122fab20fc1eed235054ffe to before 216509dda290f6db92c816dd54b83c1df9da9e76, 50612537e9ab29693122fab20fc1eed235054ffe to before c2047b0e216c8edce227d7c42f99ac2877dad0e4, 50612537e9ab29693122fab20fc1eed235054ffe to before 10df49cfca73dfbbdb6c4150d859f7e8926ae427, 50612537e9ab29693122fab20fc1eed235054ffe to before 3824c5fad18eeb7abe0c4fc966f29959552dca3e, 50612537e9ab29693122fab20fc1eed235054ffe to before 356078a5c55ec8d2061fcc009fb8599f5b0527f9, 50612537e9ab29693122fab20fc1eed235054ffe to before f8d4bc455047cf3903cd6f85f49978987dbb3027
Linux

Linux · 3.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sched/sch_netem.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56779

Affected technology

linux kernel · before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.4 (exclusive)
linux

Linux · 3234975f477f746c22d076ea178a79ea104b2ca7 to before a85364f0d30dee01c5d5b4afa55a9629a8f36d8e, 3234975f477f746c22d076ea178a79ea104b2ca7 to before 2d505a801e57428057563762f67a5a62009b2600, 3234975f477f746c22d076ea178a79ea104b2ca7 to before 0ab0a3ad24e970e894abcac58f85c332d1726749, 3234975f477f746c22d076ea178a79ea104b2ca7 to before 45abb68c941ebc9a35c6d3a7b08196712093c636, 3234975f477f746c22d076ea178a79ea104b2ca7 to before 37dfc81266d3a32294524bfadd3396614f8633ee, 3234975f477f746c22d076ea178a79ea104b2ca7 to before 6f73f920b7ad0084373e46121d7ac34117aed652, 3234975f477f746c22d076ea178a79ea104b2ca7 to before 98100e88dd8865999dc6379a3356cd799795fe7b
Linux

Linux · 3.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4state.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56780

Affected technology

linux kernel · from 4.19.295 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.257 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.10.195 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.15.132 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 6.1.53 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.4.16 (inclusive), before 6.5 (exclusive)
linux

linux kernel · from 6.5.3 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.4 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · d40c192e119892799dd4ddf94f5cea6fa93775ef to before a5abba5e0e586e258ded3e798fe5f69c66fec198, 86d89987f0998c98f57d641e308b40452a994045 to before 6f3821acd7c3143145999248087de5fb4b48cf26, 89602de9a2d7080b7a4029d5c1bf8f78d295ff5f to before ab6cfcf8ed2c7496f55d020b65b1d8cd55d9a2cb, 3027e200dd58d5b437f16634dbbd355b29ffe0a6 to before 3e6ff207cd5bd924ad94cd1a7c633bcdac0ba1cb, dabc8b20756601b9e1cc85a81d47d3f98ed4d13a to before bcacb52a985f1b6d280f698a470b873dfe52728a, dabc8b20756601b9e1cc85a81d47d3f98ed4d13a to before 8ea87e34792258825d290f4dc5216276e91cb224, dabc8b20756601b9e1cc85a81d47d3f98ed4d13a to before ac6f420291b3fee1113f21d612fa88b628afab5b, f3e9a2bbdeb8987508dd6bb2b701dea911d4daec, 903fc5d8cb48b0d2de7095ef40e39fd32bb27bd0, 31bed65eecbc5ce57592cfe31947eaa64e3d678e, 5.4.257 to before 5.4.287, 5.10.195 to before 5.10.231, 5.15.132 to before 5.15.174, 6.1.53 to before 6.1.120, 4.19.295 to before 4.20, 6.4.16 to before 6.5, 6.5.3 to before 6.6
Linux

Linux · 6.6
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/quota/dquot.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56781

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57802

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57807

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57849

Affected technology

linux kernel · before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

Linux · e3d617fe6ac7294974fc513dc5e4d8ada8080fd1 to before 238e3af849dfdcb1faed544349f7025e533f9aab, e3d617fe6ac7294974fc513dc5e4d8ada8080fd1 to before 99192c735ed4bfdff0d215ec85c8a87a677cb898, e3d617fe6ac7294974fc513dc5e4d8ada8080fd1 to before 06a92f810df8037ca36157282ddcbefdcaf049b8, e3d617fe6ac7294974fc513dc5e4d8ada8080fd1 to before b5be6a0bb639d165c8418d8dddd8f322587be8be, e3d617fe6ac7294974fc513dc5e4d8ada8080fd1 to before a69752f1e5de817941a2ea0609254f6f25acd274, e3d617fe6ac7294974fc513dc5e4d8ada8080fd1 to before be54e6e0f93a39a9c00478d70d12956a5f3d5b9b, e3d617fe6ac7294974fc513dc5e4d8ada8080fd1 to before a0bd7dacbd51c632b8e2c0500b479af564afadf3
Linux

Linux · 4.8
Linux

Component: Not specified by the source
Function: call, de-allocates, calls
File: arch/s390/kernel/perf_cpum_sf.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2024-57850

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57884

Affected technology

linux kernel · from 4.8 (inclusive), before 5.4.289 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.233 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.176 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.124 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.70 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.9 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

Linux · 5a1c84b404a7176b8b36e2a0041b6f0adb3151a3 to before 66cd37660ec34ec444fe42f2277330ae4a36bb19, 5a1c84b404a7176b8b36e2a0041b6f0adb3151a3 to before d675fefbaec3815b3ae0af1bebd97f27df3a05c8, 5a1c84b404a7176b8b36e2a0041b6f0adb3151a3 to before 63eac98d6f0898229f515cb62fe4e4db2430e99c, 5a1c84b404a7176b8b36e2a0041b6f0adb3151a3 to before bfb701192129803191c9cd6cdd1f82cd07f8de2c, 5a1c84b404a7176b8b36e2a0041b6f0adb3151a3 to before 1ff2302e8aeac7f2eedb551d7a89617283b5c6b2, 5a1c84b404a7176b8b36e2a0041b6f0adb3151a3 to before 58d0d02dbc67438fc80223fdd7bbc49cf0733284, 5a1c84b404a7176b8b36e2a0041b6f0adb3151a3 to before 6aaced5abd32e2a57cd94fd64f824514d0361da8
Linux

Linux · 4.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: mm/vmscan.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-57889

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57890

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57892

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57900

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57901

Affected technology

linux kernel · from 4.19.320 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.282 (inclusive), before 5.4.289 (exclusive)
linux

linux kernel · from 5.10.224 (inclusive), before 5.10.233 (exclusive)
linux

linux kernel · from 5.15.165 (inclusive), before 5.15.176 (exclusive)
linux

linux kernel · from 6.1.103 (inclusive), before 6.1.124 (exclusive)
linux

linux kernel · from 6.6.44 (inclusive), before 6.6.70 (exclusive)
linux

linux kernel · from 6.10.3 (inclusive), before 6.12.9 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

Linux · c77064e76c768fb101ea5ff92dc771142fc9d8fd to before 560cbdd26b510626f3f4f27d34c44dfd3dd3499d, 83e2dfadcb6258fe3111c8a8ec9cf34465e55e64 to before 0d3fa6c3c9ca7aa255696150f5b759ac4a4974e1, d0a1f9aa70f0d8a05b6320e8a3f3b83adab8dac3 to before de4f8d477c67ec1d7c28f3486c3e47d147d90a01, 5839f59ff1dd4e35b9e767927931a039484839e1 to before 5d336714db324bef84490c75dcc48b387ef0346e, 5a041d25b67042cbe06a0fb292ee22fd1147e65c to before a693b87692b4d7c50f4fc08a996678d60534a9da, 79eecf631c14e7f4057186570ac20e2cfac3802e to before cd8488fdc7116f6da277515647b167859d4f72b1, 79eecf631c14e7f4057186570ac20e2cfac3802e to before f91a5b8089389eb408501af2762f168c3aaa7b79, 3dfd84aa72fa7329ed4a257c8f40e0c9aff4dc8f, 66f23a7b5174b5d3e7111fd2d0d5a4f3faaa12e5, 5.4.282 to before 5.4.289, 5.10.224 to before 5.10.233, 5.15.165 to before 5.15.176, 6.1.103 to before 6.1.124, 6.6.44 to before 6.6.70, 4.19.320 to before 4.20, 6.10.3 to before 6.11
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: include/linux/if_vlan.h, net/packet/af_packet.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-57902

Affected technology

linux kernel · from 4.19.320 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.282 (inclusive), before 5.4.289 (exclusive)
linux

linux kernel · from 5.10.224 (inclusive), before 5.10.233 (exclusive)
linux

linux kernel · from 5.15.165 (inclusive), before 5.15.176 (exclusive)
linux

linux kernel · from 6.1.103 (inclusive), before 6.1.124 (exclusive)
linux

linux kernel · from 6.6.44 (inclusive), before 6.6.70 (exclusive)
linux

linux kernel · from 6.10.3 (inclusive), before 6.12.9 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

Linux · c77064e76c768fb101ea5ff92dc771142fc9d8fd to before 66ffb0cf2125dcf9e902eede4a43653a24fd9cb2, 83e2dfadcb6258fe3111c8a8ec9cf34465e55e64 to before fa57f07ba0622c8692f40e1300adca59277b0044, d0a1f9aa70f0d8a05b6320e8a3f3b83adab8dac3 to before 65c67049e9ed481f6b52264b39618b8c6dfb1d3e, 5839f59ff1dd4e35b9e767927931a039484839e1 to before d91b4a9baa018a001d5c884e236c0cfd31f9f4a1, 5a041d25b67042cbe06a0fb292ee22fd1147e65c to before 7aa78d0d8546d8ce5a764add3f55d72e707c18f1, 79eecf631c14e7f4057186570ac20e2cfac3802e to before b65292a548d847099a4fe0fff53122a06e798e25, 79eecf631c14e7f4057186570ac20e2cfac3802e to before 77ee7a6d16b6ec07b5c3ae2b6b60a24c1afbed09, 3dfd84aa72fa7329ed4a257c8f40e0c9aff4dc8f, 66f23a7b5174b5d3e7111fd2d0d5a4f3faaa12e5, 5.4.282 to before 5.4.289, 5.10.224 to before 5.10.233, 5.15.165 to before 5.15.176, 6.1.103 to before 6.1.124, 6.6.44 to before 6.6.70, 4.19.320 to before 4.20, 6.10.3 to before 6.11
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/packet/af_packet.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-57904

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57906

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57908

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57910

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57911

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57912

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57913

Affected technology

linux kernel · from 2.6.35 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.177 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.125 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.72 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.10 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

Linux · ddf8abd2599491cbad959c700b90ba72a5dce8d0 to before bfe60030fcd976e3546e1f73d6d0eb3fea26442e, ddf8abd2599491cbad959c700b90ba72a5dce8d0 to before 3e4d32cc145955d5c56c5498a3ff057e4aafa9d1, ddf8abd2599491cbad959c700b90ba72a5dce8d0 to before 19fc1c83454ca9d5699e39633ec79ce26355251c, ddf8abd2599491cbad959c700b90ba72a5dce8d0 to before 82f60f3600aecd9ffcd0fbc4e193694511c85b47, ddf8abd2599491cbad959c700b90ba72a5dce8d0 to before ea6a1498742430eb2effce0d1439ff29ef37dd7d, ddf8abd2599491cbad959c700b90ba72a5dce8d0 to before a8b6a18b9b66cc4c016d63132b59ce5383f7cdd2, ddf8abd2599491cbad959c700b90ba72a5dce8d0 to before dfc51e48bca475bbee984e90f33fdc537ce09699
Linux

Linux · 2.6.35
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: is
File: drivers/usb/gadget/function/f_fs.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-57922

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57929

Affected technology

linux kernel · from 4.9 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.177 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.125 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.72 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.10 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

Linux · fdd1315aa5f022fe6574efdc2d9535f75a0ee255 to before 9c7c03d0e926762adf3a3a0ba86156fb5e19538b, fdd1315aa5f022fe6574efdc2d9535f75a0ee255 to before fc1ef07c3522e257e32702954f265debbcb096a7, fdd1315aa5f022fe6574efdc2d9535f75a0ee255 to before 738994872d77e189b2d13c501a1d145e95d98f46, fdd1315aa5f022fe6574efdc2d9535f75a0ee255 to before e477021d252c007f0c6d45b5d13d341efed03979, fdd1315aa5f022fe6574efdc2d9535f75a0ee255 to before 6002bec5354f86d1a2df21468f68e3ec03ede9da, fdd1315aa5f022fe6574efdc2d9535f75a0ee255 to before 017c4470bff53585370028fec9341247bad358ff, fdd1315aa5f022fe6574efdc2d9535f75a0ee255 to before f2893c0804d86230ffb8f1c8703fdbb18648abc8
Linux

Linux · 4.9
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/md/persistent-data/dm-array.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-57931

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57938

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57946

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57948

Affected technology

linux kernel · before 5.4.290 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.177 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.127 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.74 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.11 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

Linux · 62610ad21870a8cf842d4a48f07c3a964e1d2622 to before 0d11dc30edfc4acef0acef130bb5ca596317190a, 62610ad21870a8cf842d4a48f07c3a964e1d2622 to before 98ea165a2ac240345c48b57c0a3d08bbcad02929, 62610ad21870a8cf842d4a48f07c3a964e1d2622 to before 80aee0bc0dbe253b6692d33e64455dc742fc52f1, 62610ad21870a8cf842d4a48f07c3a964e1d2622 to before 41e4ca8acba39f1cecff2dfdf14ace4ee52c4272, 62610ad21870a8cf842d4a48f07c3a964e1d2622 to before 2e41e98c4e79edae338f2662dbdf74ac2245d183, 62610ad21870a8cf842d4a48f07c3a964e1d2622 to before b856d2c1384bc5a7456262afd21aa439ee5cdf6e, 62610ad21870a8cf842d4a48f07c3a964e1d2622 to before eb09fbeb48709fe66c0d708aed81e910a577a30a
Linux

Linux · 3.5
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/mac802154/iface.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-57951

Affected technology

linux kernel · from 4.19.302 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.264 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.10.204 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.15.143 (inclusive), before 5.15.177 (exclusive)
linux

linux kernel · from 6.1.68 (inclusive), before 6.1.127 (exclusive)
linux

linux kernel · from 6.6.7 (inclusive), before 6.6.74 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.11 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

linux kernel · 6.13 · update rc7
linux

Linux · 54d0d83a53508d687fd4a225f8aa1f18559562d0 to before 95e4f62df23f4df1ce6ef897d44b8e23c260921a, 7f4c89400d2997939f6971c7981cc780a219e36b to before 14984139f1f2768883332965db566ef26db609e7, 6fcbcc6c8e52650749692c7613cbe71bf601670d to before 15b453db41d36184cf0ccc21e7df624014ab6a1a, 75b5016ce325f1ef9c63e5398a1064cf8a7a7354 to before 3d41dbf82e10c44e53ea602398ab002baec27e75, 53f408cad05bb987af860af22f4151e5a18e6ee8 to before a5cbbea145b400e40540c34816d16d36e0374fbc, 5c0930ccaad5a74d74e8b18b648c5eb21ed2fe94 to before 38492f6ee883c7b1d33338bf531a62cff69b4b28, 5c0930ccaad5a74d74e8b18b648c5eb21ed2fe94 to before 2f8dea1692eef2b7ba6a256246ed82c365fdc686, 9a2fc41acb69dd4e2a58d0c04346c3333c2341fc, 5.4.264 to before 5.4.290, 5.10.204 to before 5.10.234, 5.15.143 to before 5.15.177, 6.1.68 to before 6.1.127, 6.6.7 to before 6.6.74, 4.19.302 to before 4.20
Linux

Linux · 6.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: include/linux/hrtimer.h, kernel/cpu.c, kernel/time/hrtimer.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-0927

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21638

Affected technology

linux kernel · from 3.10.41 (inclusive), before 3.11 (exclusive)
linux

linux kernel · from 3.12.20 (inclusive), before 3.13 (exclusive)
linux

linux kernel · from 3.14.5 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.177 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.125 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.72 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.10 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

Linux · b14878ccb7fac0242db82720b784ab62c467c0dc to before cf387cdebfaebae228dfba162f94c567a67610c3, b14878ccb7fac0242db82720b784ab62c467c0dc to before dc583e7e5f8515ca489c0df28e4362a70eade382, b14878ccb7fac0242db82720b784ab62c467c0dc to before bd2a2939423566c654545fa3e96a656662a0af9e, b14878ccb7fac0242db82720b784ab62c467c0dc to before 1b67030d39f2b00f94ac1f0af11ba6657589e4d3, b14878ccb7fac0242db82720b784ab62c467c0dc to before 7ec30c54f339c640aa7e49d7e9f7bbed6bd42bf6, b14878ccb7fac0242db82720b784ab62c467c0dc to before c184bc621e3cef03ac9ba81a50dda2dae6a21d36, b14878ccb7fac0242db82720b784ab62c467c0dc to before 15649fd5415eda664ef35780c2013adeb5d9c695, e5eae4a0511241959498b180fa0df0d4f1b11b9c, 88830f227a1f96e44d82ddfcb0cc81d517ec6dd8, 3938b0336a93fa5faa242dc9e5823ac69df9e066, 3.10.41 to before 3.11, 3.12.21 to before 3.13, 3.14.5 to before 3.15
Linux

Linux · 3.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/sctp/sysctl.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21639

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21640

Affected technology

linux kernel · from 3.8 (inclusive), before 6.1.125 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.72 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.10 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

Linux · 3c68198e75111a905ac2412be12bf7b29099729b to before 5599b212d2f4466e1832a94e9932684aaa364587, 3c68198e75111a905ac2412be12bf7b29099729b to before 03ca51faba2b017bf6c90e139434c4117d0afcdc, 3c68198e75111a905ac2412be12bf7b29099729b to before 86ddf8118123cb58a0fb8724cad6979c4069065b, 3c68198e75111a905ac2412be12bf7b29099729b to before 3cd0659deb9c03535fd61839e91d4d4d3e51ac71, 3c68198e75111a905ac2412be12bf7b29099729b to before ad673e514b2793b8d5902f6ba6ab7e890dea23d5, 3c68198e75111a905ac2412be12bf7b29099729b to before f0bb3935470684306e4e04793a20ac4c4b08de0b, 3c68198e75111a905ac2412be12bf7b29099729b to before ea62dd1383913b5999f3d16ae99d411f41b528d4
Linux

Linux · 3.8
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/sctp/sysctl.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21653

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21664

Affected technology

linux kernel · from 3.15.1 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.177 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.125 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.72 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.10 (exclusive)
linux

linux kernel · 3.15
linux

linux kernel · 3.15 · update rc4
linux

linux kernel · 3.15 · update rc5
linux

linux kernel · 3.15 · update rc6
linux

linux kernel · 3.15 · update rc7
linux

linux kernel · 3.15 · update rc8
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

Linux · b10ebd34cccae1b431caf1be54919aede2be7cbe to before ec037fe8c0d0f6140e3d8a49c7b29cb5582160b8, b10ebd34cccae1b431caf1be54919aede2be7cbe to before cd30a3960433ec2db94b3689752fa3c5df44d649, b10ebd34cccae1b431caf1be54919aede2be7cbe to before 802666a40c71a23542c43a3f87e3a2d0f4e8fe45, b10ebd34cccae1b431caf1be54919aede2be7cbe to before 12771050b6d059eea096993bf2001da9da9fddff, b10ebd34cccae1b431caf1be54919aede2be7cbe to before 6b305e98de0d225ccebfb225730a9f560d28ecb0, b10ebd34cccae1b431caf1be54919aede2be7cbe to before cbd0d5ecfa390ac29c5380200147d09c381b2ac6, b10ebd34cccae1b431caf1be54919aede2be7cbe to before 80f130bfad1dab93b95683fc39b87235682b8f72
Linux

Linux · 3.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: The, saw, to
File: drivers/md/dm-thin.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21678

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21687

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21689

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21694

Affected technology

linux kernel · from 4.19.317 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.279 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.10.221 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.15.162 (inclusive), before 5.15.177 (exclusive)
linux

linux kernel · from 6.1.95 (inclusive), before 6.1.127 (exclusive)
linux

linux kernel · from 6.6.35 (inclusive), before 6.6.74 (exclusive)
linux

linux kernel · from 6.9.6 (inclusive), before 6.12.11 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

linux kernel · 6.13 · update rc7
linux

Linux · 803d5a33d5ffdc2d86dcc0cfa01655a330612cdb to before 84c4ed15626574c9ac6c1039ba9c137a77bcc7f2, 70c1835e776c8447c1aca87ddb38cfe764fe756a to before 80da29deb88a3a907441fc35bb7bac309f31e713, e1b160a50c756e0efbea290b9bf5117cb80e8c4b to before 649b266606bc413407ce315f710c8ce8a88ee30a, a373ad833a6bfe4bc6cedcf7e56a99cc6fd9a193 to before 65c367bd9d4f43513c7f837df5753bea9561b836, 518fbd644dabb6aedbdd4939c6c9cc1bf651459f to before a5a2ee8144c3897d37403a69118c3e3dc5713958, 5cbcb62dddf5346077feb82b7b0c9254222d3445 to before 80828540dad0757b6337c6561d49c81038f38d87, 5cbcb62dddf5346077feb82b7b0c9254222d3445 to before cbc5dde0a461240046e8a41c43d7c3b76d5db952, 7bdf1d550ddfcd9ab797087421f77b7aceddc8a7, e8780e8a0e25dc4c3927f611ec8970d26c0c7369, 5.4.279 to before 5.4.290, 5.10.221 to before 5.10.234, 5.15.162 to before 5.15.177, 6.1.95 to before 6.1.127, 6.6.35 to before 6.6.74, 4.19.317 to before 4.20, 6.9.6 to before 6.10
Linux

Linux · 6.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/proc/vmcore.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21697

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21699

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.