CVE-2024-26958: linux kernel before 5.10.215 (exclusive), from 5.11 (inclusive), before 5.15.154 (exclusive), from 5.16 (inclusive)…

Affected technology

linux kernel · before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.84 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.24 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.12 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.3 (exclusive)
linux

debian linux · 10.0
debian

Linux · af7cf057933f01dc7f33ddfb5e436ad598ed17ad to before 6cd3f13aaa62970b5169d990e936b2e96943bc6a, af7cf057933f01dc7f33ddfb5e436ad598ed17ad to before 4595d90b5d2ea5fa4d318d13f59055aa4bf3e7f5, af7cf057933f01dc7f33ddfb5e436ad598ed17ad to before 80d24b308b7ee7037fc90d8ac99f6f78df0a256f, af7cf057933f01dc7f33ddfb5e436ad598ed17ad to before 3abc2d160ed8213948b147295d77d44a22c88fa3, af7cf057933f01dc7f33ddfb5e436ad598ed17ad to before e25447c35f8745337ea8bc0c9697fcac14df8605, af7cf057933f01dc7f33ddfb5e436ad598ed17ad to before 1daf52b5ffb24870fbeda20b4967526d8f9e12ab, af7cf057933f01dc7f33ddfb5e436ad598ed17ad to before cf54f66e1dd78990ec6b32177bca7e6ea2144a95, af7cf057933f01dc7f33ddfb5e436ad598ed17ad to before 17f46b803d4f23c66cacce81db35fef3adb8f2af
Linux

Linux · 4.5
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/nfs/direct.c, fs/nfs/write.c, include/linux/nfs_fs.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.