CVE-2024-35910: linux kernel from 4.2 (inclusive), before 4.19.312 (exclusive), from 4.20 (inclusive), before 5.4.274 (exclusive)…

Affected technology

linux kernel · from 4.2 (inclusive), before 4.19.312 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.85 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

debian linux · 10.0
debian

Linux · 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe to before 93f0133b9d589cc6e865f254ad9be3e9d8133f50, 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe to before 44e62f5d35678686734afd47c6a421ad30772e7f, 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe to before e3e27d2b446deb1f643758a0c4731f5c22492810, 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe to before 2e43d8eba6edd1cf05a3a20fdd77688fa7ec16a4, 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe to before 91b243de910a9ac8476d40238ab3dbfeedd5b7de, 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe to before c1ae4d1e76eacddaacb958b67cd942082f800c87, 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe to before 899265c1389fe022802aae73dbf13ee08837a35a, 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe to before 151c9c724d05d5b0dd8acd3e11cb69ef1f2dbada
Linux

Linux · 4.2
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
Function: that
File: include/net/inet_connection_sock.h, include/net/sock.h, net/ipv4/inet_connection_sock.c, net/ipv4/tcp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.8/10) rates confidentiality and integrity impact as low; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.8/10) rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.