CVE-2024-27032: linux kernel from 4.19.307 (inclusive), before 4.20 (exclusive), from 5.4.269 (inclusive), before 5.5 (exclusive)…

Affected technology

linux kernel · from 4.19.307 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.269 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.210 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.149 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.77 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.6.16 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7.4 (inclusive), before 6.7.11 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.2 (exclusive)
linux

Linux · b1020a546779139eec5d930e15ce534c1101b89c to before fe4de493572a4263554903bf9c3afc5c196e15f0, 2a7b12d4705bc308cf18eae2b69ec8db34881cc3 to before 8844b2f8a3f0c428b74672f9726f9950b1a7764c, b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c to before d034810d02a5af8eb74debe29877dcaf5f00fdd1, 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd to before f26091a981318b5b7451d61f99bc073a6af8db67, 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd to before 21ec68234826b1b54ab980a8df6e33c74cfbee58, bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8, 9fceaf8182d453639cddb7f4a6877a1e1564de39, 80c69f576ff39d6ae8a6e2107da3dc03b533759c, b4fb0807a1d60f8642a5fd62bd659cd6052eaf97, 6.1.77 to before 6.1.83, 6.6.16 to before 6.6.23, 6.7.4 to before 6.7.11, 4.19.307 to before 4.20, 5.4.269 to before 5.5, 5.10.210 to before 5.11, 5.15.149 to before 5.16
Linux

Linux · 6.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/f2fs/f2fs.h, fs/f2fs/recovery.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 6.3/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.