CVE-2024-26851: linux kernel from 2.6.17 (inclusive), before 4.19.310 (exclusive), from 4.20 (inclusive), before 5.4.272 (exclusive)…

Affected technology

linux kernel · from 2.6.17 (inclusive), before 4.19.310 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.272 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.213 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.152 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.82 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.22 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.10 (exclusive)
linux

linux kernel · 6.8 · update rc1
linux

linux kernel · 6.8 · update rc2
linux

linux kernel · 6.8 · update rc3
linux

linux kernel · 6.8 · update rc4
linux

linux kernel · 6.8 · update rc5
linux

linux kernel · 6.8 · update rc6
linux

debian linux · 10.0
debian

Linux · 5e35941d990123f155b02d5663e51a24f816b6f3 to before 98db42191329c679f4ca52bec0b319689e1ad8cb, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 4bafcc43baf7bcf93566394dbd15726b5b456b7a, 5e35941d990123f155b02d5663e51a24f816b6f3 to before ccd1108b16ab572d9bf635586b0925635dbd6bbc, 5e35941d990123f155b02d5663e51a24f816b6f3 to before b3c0f553820516ad4b62a9390ecd28d6f73a7b13, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 39001e3c42000e7c2038717af0d33c32319ad591, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 014a807f1cc9c9d5173c1cd935835553b00d211c, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 80ee5054435a11c87c9a4f30f1ff750080c96416, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 767146637efc528b5e3d31297df115e85a2fd362
Linux

Linux · 2.6.17
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/netfilter/nf_conntrack_h323_asn1.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.