CVE-2024-26903: linux kernel before 4.19.311 (exclusive), from 4.20 (inclusive), before 5.4.273 (exclusive), from 5.5 (inclusive)…

Affected technology

linux kernel · before 4.19.311 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.273 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.214 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.153 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.11 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 369f419c097e82407dd429a202cde9a73d3ae29b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5f369efd9d963c1f711a06c9b8baf9f5ce616d85, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 81d7d920a22fd58ef9aedb1bd0a68ee32bd23e96, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8d1753973f598531baaa2c1033cf7f7b5bb004b0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 567c0411dc3b424fc7bd1e6109726d7ba32d4f73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3ead59bafad05f2967ae2438c0528d53244cfde5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5f9fe302dd3a9bbc50f4888464c1773f45166bfd, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2535b848fa0f42ddff3e5255cf5e742c9b77bb26
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: executed
File: net/bluetooth/rfcomm/core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.