CVE-2024-26773: linux kernel before 4.19.308 (exclusive), from 4.20 (inclusive), before 5.4.270 (exclusive), from 5.5 (inclusive)…

Affected technology

linux kernel · before 4.19.308 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.270 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.211 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.150 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.80 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.19 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.7 (exclusive)
linux

linux kernel · 6.8 · update rc1
linux

linux kernel · 6.8 · update rc2
linux

debian linux · 10.0
debian

Linux · 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 21f8cfe79f776287459343e9cfa6055af61328ea, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 260fc96283c0f594de18a1b045faf6d8fb42874d, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 927794a02169778c9c2e7b25c768ab3ea8c1dc03, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 4c21fa60a6f4606f6214a38f50612b17b2f738f5, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before f97e75fa4e12b0aa0224e83fcbda8853ac2adf36, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 0184747b552d6b5a14db3b7fcc3b792ce64dedd1, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before a2576ae9a35c078e488f2c573e9e6821d651fbbe, 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 4530b3660d396a646aad91a787b6ab37cf604b53
Linux

Linux · 3.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/ext4/mballoc.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.