CVE-2024-26882: linux kernel from 3.10 (inclusive), before 5.4.273 (exclusive), from 5.5 (inclusive), before 5.10.214 (exclusive)…

Affected technology

linux kernel · from 3.10 (inclusive), before 5.4.273 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.214 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.153 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.11 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.2 (exclusive)
linux

Linux · c54419321455631079c7d6e60bc732dd0c5914c5 to before ec6bb01e02cbd47781dd90775b631a1dc4bd9d2b, c54419321455631079c7d6e60bc732dd0c5914c5 to before 77fd5294ea09b21f6772ac954a121b87323cec80, c54419321455631079c7d6e60bc732dd0c5914c5 to before 5c03387021cfa3336b97e0dcba38029917a8af2a, c54419321455631079c7d6e60bc732dd0c5914c5 to before 60044ab84836359534bd7153b92e9c1584140e4a, c54419321455631079c7d6e60bc732dd0c5914c5 to before c4c857723b37c20651300b3de4ff25059848b4b0, c54419321455631079c7d6e60bc732dd0c5914c5 to before f6723d8dbfdc10c784a56748f86a9a3cd410dbd5, c54419321455631079c7d6e60bc732dd0c5914c5 to before ca914f1cdee8a85799942c9b0ce5015bbd6844e1, c54419321455631079c7d6e60bc732dd0c5914c5 to before b0ec2abf98267f14d032102551581c833b0659d3
Linux

Linux · 3.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/ipv4/ip_tunnel.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as low. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.