CVE-2024-35811: linux kernel from 3.7 (inclusive), before 4.19.312 (exclusive), from 4.20 (inclusive), before 5.4.274 (exclusive)…

Affected technology

linux kernel · from 3.7 (inclusive), before 4.19.312 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.84 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.24 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.12 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.3 (exclusive)
linux

debian linux · 10.0
debian

Linux · e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before 202c503935042272e2f9e1bb549d5f69a8681169, e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before 8e3f03f4ef7c36091f46e7349096efb5a2cdb3a1, e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before bacb8c3ab86dcd760c15903fcee58169bc3026aa, e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before 8c36205123dc57349b59b4f1a2301eb278cbc731, e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before 0b812f706fd7090be74812101114a0e165b36744, e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before 190794848e2b9d15de92d502b6ac652806904f5a, e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before 6678a1e7d896c00030b31491690e8ddc9a90767a, e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before 0a7591e14a8da794d0b93b5d1c6254ccb23adacb, e756af5b30b008f6ffcfebf8ad0b477f6f225b62 to before 0f7352557a35ab7888bc7831411ec8a3cbe20d78
Linux

Linux · 3.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A attacker could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not state a further attacker outcome.