CVE-2024-35884: linux kernel from 5.6 (inclusive), before 5.10.215 (exclusive), from 5.11 (inclusive), before 5.15.154 (exclusive)…

Affected technology

linux kernel · from 5.6 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.85 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

debian linux · 10.0
debian

Linux · 9fd1ff5d2ac7181844735806b0a703c942365291 to before 3391b157780bbedf8ef9f202cbf10ee90bf6b0f8, 9fd1ff5d2ac7181844735806b0a703c942365291 to before d49ae15a5767d4e9ef8bbb79e42df1bfebc94670, 9fd1ff5d2ac7181844735806b0a703c942365291 to before d12245080cb259d82b34699f6cd4ec11bdb688bd, 9fd1ff5d2ac7181844735806b0a703c942365291 to before 3001e7aa43d6691db2a878b0745b854bf12ddd19, 9fd1ff5d2ac7181844735806b0a703c942365291 to before 35fe0e0b5c00bef7dde74842a2564c43856fbce4, 9fd1ff5d2ac7181844735806b0a703c942365291 to before 3d010c8031e39f5fa1e8b13ada77e0321091011f
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: include/linux/udp.h, net/ipv4/udp.c, net/ipv4/udp_offload.c, net/ipv6/udp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.