CVE-2024-35898: linux kernel from 4.16 (inclusive), before 4.19.312 (exclusive), from 4.20 (inclusive), before 5.4.274 (exclusive)…

Affected technology

linux kernel · from 4.16 (inclusive), before 4.19.312 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.85 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

debian linux · 10.0
debian

Linux · 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before 69d1fe14a680042ec913f22196b58e2c8ff1b007, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before a347bc8e6251eaee4b619da28020641eb5b0dd77, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before 940d41caa71f0d3a52df2fde5fada524a993e331, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before 2485bcfe05ee3cf9ca8923a94fa2e456924c79c8, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before 9b5b7708ec2be21dd7ef8ca0e3abe4ae9f3b083b, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before 8b891153b2e4dc0ca9d9dab8f619d49c740813df, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before e684b1674fd1ca4361812a491242ae871d6b2859, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before 24225011d81b471acc0e1e315b7d9905459a6304
Linux

Linux · 4.16
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/netfilter/nf_tables_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.