CVE-2024-35969: linux kernel from 2.6.35 (inclusive), before 4.19.313 (exclusive), from 4.20 (inclusive), before 5.4.275 (exclusive)…

Affected technology

linux kernel · from 2.6.35 (inclusive), before 4.19.313 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.156 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.87 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.28 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.7 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

debian linux · 10.0
debian

Linux · 5c578aedcb21d79eeb4e9cf04ca5b276ac82614c to before b4b3b69a19016d4e7fbdbd1dbcc184915eb862e1, 5c578aedcb21d79eeb4e9cf04ca5b276ac82614c to before cca606e14264098cba65efa82790825dbf69e903, 5c578aedcb21d79eeb4e9cf04ca5b276ac82614c to before 3fb02ec57ead2891a2306af8c51a306bc5945e70, 5c578aedcb21d79eeb4e9cf04ca5b276ac82614c to before 4b19e9507c275de0cfe61c24db69179dc52cf9fb, 5c578aedcb21d79eeb4e9cf04ca5b276ac82614c to before de76ae9ea1a6cf9e77fcec4f2df2904e26c23ceb, 5c578aedcb21d79eeb4e9cf04ca5b276ac82614c to before 01b11a0566670612bd464a932e5ac2eae53d8652, 5c578aedcb21d79eeb4e9cf04ca5b276ac82614c to before 6cdb20c342cd0193d3e956e3d83981d0f438bb83, 5c578aedcb21d79eeb4e9cf04ca5b276ac82614c to before 7633c4da919ad51164acbf1aa322cc1a3ead6129
Linux

Linux · 2.6.35
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: include/net/addrconf.h, net/ipv6/addrconf.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.