CVE-2024-27013: linux kernel from 2.6.35 (inclusive), before 4.19.313 (exclusive), from 4.20 (inclusive), before 5.4.275 (exclusive)…

Affected technology

linux kernel · from 2.6.35 (inclusive), before 4.19.313 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.157 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.88 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.29 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.8 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

fedora · 38
fedoraproject

fedora · 39
fedoraproject

fedora · 40
fedoraproject

Linux · ef3db4a5954281bc1ea49a4739c88eaea091dc71 to before 68459b8e3ee554ce71878af9eb69659b9462c588, ef3db4a5954281bc1ea49a4739c88eaea091dc71 to before 4b0dcae5c4797bf31c63011ed62917210d3fdac3, ef3db4a5954281bc1ea49a4739c88eaea091dc71 to before 14cdb43dbc827e18ac7d5b30c5b4c676219f1421, ef3db4a5954281bc1ea49a4739c88eaea091dc71 to before a50dbeca28acf7051dfa92786b85f704c75db6eb, ef3db4a5954281bc1ea49a4739c88eaea091dc71 to before 62e27ef18eb4f0d33bbae8e9ef56b99696a74713, ef3db4a5954281bc1ea49a4739c88eaea091dc71 to before 40f4ced305c6c47487d3cd8da54676e2acc1a6ad, ef3db4a5954281bc1ea49a4739c88eaea091dc71 to before 52854101180beccdb9dc2077a3bea31b6ad48dfa, ef3db4a5954281bc1ea49a4739c88eaea091dc71 to before f8bbc07ac535593139c875ffa19af924b1084540
Linux

Linux · 2.6.35
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/tun.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.