CVE-2024-35888: linux kernel from 4.19.20 (inclusive), before 4.19.312 (exclusive), from 4.20.7 (inclusive), before 5.4.274…

Affected technology

linux kernel · from 4.19.20 (inclusive), before 4.19.312 (exclusive)
linux

linux kernel · from 4.20.7 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.85 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

debian linux · 10.0
debian

Linux · 0a198e0bb8bef51ced179702ad1af6f9e3715b64 to before 06a939f72a24a7d8251f84cf4c042df86c6666ac, cb73ee40b1b381eaf3749e6dbeed567bb38e5258 to before e54a0c79cdc2548729dd7e2e468b08c5af4d0df5, cb73ee40b1b381eaf3749e6dbeed567bb38e5258 to before b14b9f9503ec823ca75be766dcaeff4f0bfeca85, cb73ee40b1b381eaf3749e6dbeed567bb38e5258 to before ee0088101beee10fa809716d6245d915b09c37c7, cb73ee40b1b381eaf3749e6dbeed567bb38e5258 to before 1db7fcb2b290c47c202b79528824f119fa28937d, cb73ee40b1b381eaf3749e6dbeed567bb38e5258 to before 4e3fdeecec5707678b0d1f18c259dadb97262e9d, cb73ee40b1b381eaf3749e6dbeed567bb38e5258 to before 0ac328a5a4138a6c03dfc3f46017bd5c19167446, cb73ee40b1b381eaf3749e6dbeed567bb38e5258 to before 17af420545a750f763025149fa7b833a4fc8b8f0, 5195acd38ae48b7b5c186f522cd4351441297859, 4.19.20 to before 4.19.312, 4.20.7 to before 4.21
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv4/ip_gre.c, net/ipv6/ip6_gre.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as low. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.