CVE-2024-26973: linux kernel from 3.10 (inclusive), before 4.19.312 (exclusive), from 4.20 (inclusive), before 5.4.274 (exclusive)…

Affected technology

linux kernel · from 3.10 (inclusive), before 4.19.312 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.84 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.24 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.12 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.3 (exclusive)
linux

debian linux · 10.0
debian

Linux · ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before 9840d1897e28f8733cc1e38f97e044f987dc0a63, ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before f52d7663a10a1266a2d3871a6dd8fd111edc549f, ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before a276c595c3a629170b0f052a3724f755d7c6adc6, ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before b7fb63e807c6dadf7ecc1d43448c4f1711d7eeee, ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before c8cc05de8e6b5612b6e9f92c385c1a064b0db375, ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before 03a7e3f2ba3ca25f1da1d3898709a08db14c1abb, ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before 74f852654b8b7866f15323685f1e178d3386c688, ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before cdd33d54e789d229d6d5007cbf3f53965ca1a5c6, ea3983ace6b79c96e6ab3d3837e2eaf81ab881e2 to before fde2497d2bc3a063d8af88b258dbadc86bd7b57c
Linux

Linux · 3.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/fat/nfs.c, handle

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.