CVE-2024-35809: debian linux 10.0; +5 more affected products

Affected technology

debian linux · 10.0
debian

linux kernel · before 4.19.312 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.84 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.24 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.12 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.3 (exclusive)
linux

Linux · f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before 9a87375bb586515c0af63d5dcdcd58ec4acf20a6, f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before 47d8aafcfe313511a98f165a54d0adceb34e54b1, f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before bbe068b24409ef740657215605284fc7cdddd491, f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before 7cc94dd36e48879e76ae7a8daea4ff322b7d9674, f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before 900b81caf00c89417172afe0e7e49ac4eb110f4b, f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before d86ad8c3e152349454b82f37007ff6ba45f26989, f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before d534198311c345e4b062c4b88bb609efb8bd91d5, f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before 6347348c6aba52dda0b33296684cbb627bdc6970, f3ec4f87d607f40497afdb5ac03f11e2ea253d52 to before 9d5286d4e7f68beab450deddbb6a32edd5ecf4bf
Linux

Linux · 2.6.36
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: drivers/pci/pci-driver.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.