CVE-2024-27395: linux kernel from 4.18 (inclusive), before 4.19.313 (exclusive), from 4.20 (inclusive), before 5.4.275 (exclusive)…

Affected technology

linux kernel · from 4.18 (inclusive), before 4.19.313 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.158 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.90 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.30 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.9 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

debian linux · 10.0
debian

Linux · 11efd5cb04a184eea4f57b68ea63dddd463158d1 to before 2db9a8c0a01fa1c762c1e61a13c212c492752994, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to before 589523cf0b384164e445dd5db8d5b1bf97982424, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to before 35880c3fa6f8fe281a19975d2992644588ca33d3, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to before 9048616553c65e750d43846f225843ed745ec0d4, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to before bca6fa2d9a9f560e6b89fd5190b05cc2f5d422c1, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to before eaa5e164a2110d2fb9e16c8a29e4501882235137, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to before edee0758747d7c219e29db9ed1d4eb33e8d32865, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to before 5ea7b72d4fac2fdbc0425cd8f2ea33abe95235b2
Linux

Linux · 4.18
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/openvswitch/conntrack.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.