CVE-2024-35897: linux kernel 5.13; +3 more affected products

Affected technology

linux kernel · from 5.4.262 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.10.202 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.13.1 (inclusive), before 5.15.155 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.86 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 5.13
linux

linux kernel · 5.13 · update rc5
linux

linux kernel · 5.13 · update rc6
linux

linux kernel · 5.13 · update rc7
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

debian linux · 10.0
debian

Linux · bf8083bbf8fa202e6e5316bbd99759ab82bfe7a3 to before e75faf01e22ec7dc671640fa0e0968964fafd2fc, e10f661adc556c4969c70ddaddf238bffdaf1e87 to before 9a3b90904d8a072287480eed4c3ece4b99d64f78, d9c4da8cb74e8ee6e58a064a3573aa37acf6c935 to before b58d0ac35f6d75ec1db8650a29dfd6f292c11362, 179d9ba5559a756f4322583388b3213fe4e391b0 to before 6cbbe1ba76ee7e674a86abd43009b083a45838cb, 179d9ba5559a756f4322583388b3213fe4e391b0 to before 2aeb805a1bcd5f27c8c0d1a9d4d653f16d1506f4, 179d9ba5559a756f4322583388b3213fe4e391b0 to before 9627fd0c6ea1c446741a33e67bc5709c59923827, 179d9ba5559a756f4322583388b3213fe4e391b0 to before 7f609f630951b624348373cef99991ce08831927, 179d9ba5559a756f4322583388b3213fe4e391b0 to before 1bc83a019bbe268be3526406245ec28c2458a518, 5.4.262 to before 5.4.274, 5.10.202 to before 5.10.215
Linux

Linux · 5.13
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/netfilter/nf_tables_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.