CVE-2024-26643: linux kernel before 5.4.274 (exclusive), from 5.5 (inclusive), before 5.10.215 (exclusive), from 5.11 (inclusive)…

Affected technology

linux kernel · before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.84 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.24 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.12 (exclusive)
linux

debian linux · 10.0
debian

Linux · 8da1b048f9a501d3d7d38c188ba09d7d0d5b8c27 to before d75a589bb92af1abf3b779cfcd1977ca11b27033, bbdb3b65aa91aa0a32b212f27780b28987f2d94f to before edcf1a3f182ecf8b6b805f0ce90570ea98c5f6bf, 448be0774882f95a74fa5eb7519761152add601b to before e2d45f467096e931044f0ab7634499879d851a5c, d19e8bf3ea4114dd21fc35da21f398203d7f7df1 to before 291cca35818bd52a407bc37ab45a15816039e363, ea3eb9f2192e4fc33b795673e56c97a21987f868 to before 406b0241d0eb598a0b330ab20ae325537d8d8163, 5f68718b34a531a556f2f50300ead2862278da26 to before b2d6f9a5b1cf968f1eaa71085ceeb09c2cb276b1, 5f68718b34a531a556f2f50300ead2862278da26 to before 5224afbc30c3ca9ba23e752f0f138729b2c48dd8, 5f68718b34a531a556f2f50300ead2862278da26 to before 552705a3650bbf46a22b1adedc1b04181490fc36, 0624f190b5742a1527cd938295caa8dc5281d4cd, 5.4.262 to before 5.4.274, 5.10.198 to before 5.10.215, 5.15.134 to before 5.15.154, 6.1.56 to before 6.1.84, 6.4.11 to before 6.5
Linux

Linux · 6.5
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/netfilter/nf_tables_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.