CVE-2024-26923: linux kernel from 2.6.23 (inclusive), before 4.19.314 (exclusive), from 4.20 (inclusive), before 5.4.275 (exclusive)…

Affected technology

linux kernel · from 2.6.23 (inclusive), before 4.19.314 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.156 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.87 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.28 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.7 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

debian linux · 10.0
debian

Linux · 1fd05ba5a2f2aa8e7b9b52ef55df850e2e7d54c9 to before a36ae0ec2353015f0f6762e59f4c2dbc0c906423, 1fd05ba5a2f2aa8e7b9b52ef55df850e2e7d54c9 to before 343c5372d5e17b306db5f8f3c895539b06e3177f, 1fd05ba5a2f2aa8e7b9b52ef55df850e2e7d54c9 to before 2e2a03787f4f0abc0072350654ab0ef3324d9db3, 1fd05ba5a2f2aa8e7b9b52ef55df850e2e7d54c9 to before e76c2678228f6aec74b305ae30c9374cc2f28a51, 1fd05ba5a2f2aa8e7b9b52ef55df850e2e7d54c9 to before b75722be422c276b699200de90527d01c602ea7c, 1fd05ba5a2f2aa8e7b9b52ef55df850e2e7d54c9 to before 507cc232ffe53a352847893f8177d276c3b532a9, 1fd05ba5a2f2aa8e7b9b52ef55df850e2e7d54c9 to before dbdf7bec5c920200077d693193f989cb1513f009, 1fd05ba5a2f2aa8e7b9b52ef55df850e2e7d54c9 to before 47d8ac011fe1c9251070e1bd64cb10b48193ec51
Linux

Linux · 2.6.23
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/unix/garbage.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.