CVE-2024-26961: linux kernel from 3.16 (inclusive), before 5.10.215 (exclusive), from 5.11 (inclusive), before 5.15.154 (exclusive)…

Affected technology

linux kernel · from 3.16 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.84 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.24 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.12 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.3 (exclusive)
linux

Linux · 5d637d5aabd85132bd85779677d8acb708e0ed90 to before 068ab2759bc0b4daf0b964de61b2731449c86531, 5d637d5aabd85132bd85779677d8acb708e0ed90 to before d3d858650933d44ac12c1f31337e7110c2071821, 5d637d5aabd85132bd85779677d8acb708e0ed90 to before dcd51ab42b7a0431575689c5f74b8b6efd45fc2f, 5d637d5aabd85132bd85779677d8acb708e0ed90 to before 20d3e1c8a1847497269f04d874b2a5818ec29e2d, 5d637d5aabd85132bd85779677d8acb708e0ed90 to before 640297c3e897bd7e1481466a6a5cb9560f1edb88, 5d637d5aabd85132bd85779677d8acb708e0ed90 to before 49c8951680d7b76fceaee89dcfbab1363fb24fd1, 5d637d5aabd85132bd85779677d8acb708e0ed90 to before e8a1e58345cf40b7b272e08ac7b32328b2543e40
Linux

Linux · 3.16
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: include/net/cfg802154.h, net/mac802154/llsec.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.