CVE-2024-35830: linux kernel from 4.3 (inclusive), before 4.19.311 (exclusive), from 4.20 (inclusive), before 5.4.273 (exclusive)…

Affected technology

linux kernel · from 4.3 (inclusive), before 4.19.311 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.273 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.214 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.153 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.11 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.2 (exclusive)
linux

debian linux · 10.0
debian

Linux · 4c5211a100399c3823563193dd881dcb3b7d24fc to before 17c2650de14842c25c569cbb2126c421489a3a24, 4c5211a100399c3823563193dd881dcb3b7d24fc to before daf21394f9898fb9f0698c3e50de08132d2164e6, 4c5211a100399c3823563193dd881dcb3b7d24fc to before 610f20e5cf35ca9c0992693cae0dd8643ce932e7, 4c5211a100399c3823563193dd881dcb3b7d24fc to before b8505a1aee8f1edc9d16d72ae09c93de086e2a1a, 4c5211a100399c3823563193dd881dcb3b7d24fc to before 8ba8db9786b55047df5ad3db3e01dd886687a77d, 4c5211a100399c3823563193dd881dcb3b7d24fc to before edbb3226c985469a2f8eb69885055c9f5550f468, 4c5211a100399c3823563193dd881dcb3b7d24fc to before c915c46a25c3efb084c4f5e69a053d7f7a635496, 4c5211a100399c3823563193dd881dcb3b7d24fc to before 4f1490a5d7a0472ee5d9f36547bc4ba46be755c7, 4c5211a100399c3823563193dd881dcb3b7d24fc to before 87399f1ff92203d65f1febf5919429f4bb613a02
Linux

Linux · 4.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: drivers/media/i2c/tc358743.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.