CVE-2024-26884: linux kernel from 3.19 (inclusive), before 4.19.311 (exclusive), from 4.20 (inclusive), before 5.4.273 (exclusive)…

Affected technology

linux kernel · from 3.19 (inclusive), before 4.19.311 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.273 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.214 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.153 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.11 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.2 (exclusive)
linux

Linux · daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before 33ec04cadb77605b71d9298311919303d390c4d5, daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before 92c81fbb3ed2e0dfc33a4183a67135e1ab566ace, daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before 64f00b4df0597590b199b62a37a165473bf658a6, daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before 3b08cfc65f07b1132c1979d73f014ae6e04de55d, daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before a83fdaeaea3677b83a53f72ace2d73a19bcd6d93, daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before 8435f0961bf3dc65e204094349bd9aeaac1f8868, daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before d817f0d34d927f2deb17dadbfe212c9a6a32ac3e, daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before a6fa75b5096c0f9826a4fabe22d907b0a5bb1016, daaf427c6ab392bedcd018e326b2ffa1e1110cd6 to before 6787d916c2cf9850c97a0a3f73e08c43e7d973b1
Linux

Linux · 3.19
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: kernel/bpf/hashtab.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.