CVE-2024-35973: linux kernel from 4.19.191 (inclusive), before 4.19.313 (exclusive), from 5.4.119 (inclusive), before 5.4.275…

Affected technology

linux kernel · from 4.19.191 (inclusive), before 4.19.313 (exclusive)
linux

linux kernel · from 5.4.119 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.10.37 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11.21 (inclusive), before 5.12 (exclusive)
linux

linux kernel · from 5.12.4 (inclusive), before 5.15.156 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.87 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.28 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.7 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

debian linux · 10.0
debian

Linux · 35385daa8db320d2d9664930c28e732578b0d7de to before 43be590456e1f3566054ce78ae2dbb68cbe1a536, 6f92124d74419797fadfbcd5b7a72c384a6413ad to before d3adf11d7993518a39bd02b383cfe657ccc0023c, 71ad9260c001b217d704cda88ecea251b2d367da to before 10204df9beda4978bd1d0c2db0d8375bfb03b915, d13f048dd40e8577260cd43faea8ec9b77520197 to before 3c1ae6de74e3d2d6333d29a2d3e13e6094596c79, d13f048dd40e8577260cd43faea8ec9b77520197 to before 4a1b65d1e55d53b397cb27014208be1e04172670, d13f048dd40e8577260cd43faea8ec9b77520197 to before 190d9efa5773f26d6f334b1b8be282c4fa13fd5e, d13f048dd40e8577260cd43faea8ec9b77520197 to before 357163fff3a6e48fe74745425a32071ec9caf852, d13f048dd40e8577260cd43faea8ec9b77520197 to before d8a6213d70accb403b82924a1c229e733433a5ef, 9a51e36ebf433adf59c051bec33f5aa54640bb4d, 21815f28af8081b258552c111774ff320cf38d38, 4.19.191 to before 4.19.313, 5.4.119 to before 5.4.275, 5.10.37 to before 5.10.216, 5.11.21 to before 5.12, 5.12.4 to before 5.13
Linux

Linux · 5.13
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/geneve.c, include/net/ip_tunnels.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.