CVE-2024-26880: linux kernel from 3.19 (inclusive), before 4.19.311 (exclusive), from 4.20 (inclusive), before 5.4.273 (exclusive)…

Affected technology

linux kernel · from 3.19 (inclusive), before 4.19.311 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.273 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.214 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.153 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.11 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.2 (exclusive)
linux

debian linux · 10.0
debian

Linux · ffcc39364160663cda1a3c358f4537302a92459b to before 69836d9329f0b4c58faaf3d886a7748ddb5bf718, ffcc39364160663cda1a3c358f4537302a92459b to before da7ece2197101b1469853e6b5e915be1e3896d52, ffcc39364160663cda1a3c358f4537302a92459b to before f89bd27709376d37ff883067193320c58a8c1d5a, ffcc39364160663cda1a3c358f4537302a92459b to before 03ad5ad53e51abf3a4c7538c1bc67a5982b41dc5, ffcc39364160663cda1a3c358f4537302a92459b to before ad10289f68f45649816cc68eb93f45fd5ec48a15, ffcc39364160663cda1a3c358f4537302a92459b to before 15a3fc5c8774c17589dabfe1d642d40685c985af, ffcc39364160663cda1a3c358f4537302a92459b to before ef02d8edf738557af2865c5bfb66a03c4e071be7, ffcc39364160663cda1a3c358f4537302a92459b to before 360a7d1be8112654f1fb328ed3862be630bca3f4, ffcc39364160663cda1a3c358f4537302a92459b to before 65e8fbde64520001abf1c8d0e573561b4746ef38
Linux

Linux · 3.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: drivers/md/dm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 6.3/10) rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.