CVE-2024-35976: linux kernel from 4.18 (inclusive), before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 4.18 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.156 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.87 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.28 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.7 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

Linux · 423f38329d267969130fb6f2c685f73d72687558 to before beb99266830520e15fbc6ca8cc5a5240d76851fd, 423f38329d267969130fb6f2c685f73d72687558 to before 0b45c25d60e38f5c2cb6823f886773a34323306d, 423f38329d267969130fb6f2c685f73d72687558 to before a82984b3c6a7e8c7937dba6e857ddf829d149417, 423f38329d267969130fb6f2c685f73d72687558 to before f0a068de65d5b7358e9aff792716afa9333f3922, 423f38329d267969130fb6f2c685f73d72687558 to before 2a523f14a3f53b46ff0e1fafd215b0bc5f6783aa, 423f38329d267969130fb6f2c685f73d72687558 to before b143e19dc28c3211f050f7848d87d9b0a170e10c, 423f38329d267969130fb6f2c685f73d72687558 to before 2eb979fbb2479bcd7e049f2f9978b6590dd8a0e6, 423f38329d267969130fb6f2c685f73d72687558 to before 237f3cf13b20db183d3706d997eedc3c49eacd44
Linux

Linux · 4.18
Linux

linux_kernel · 4.18
linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/xdp/xsk.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. Source advisory’s CVSS 3.1 assessment (base score 6.7/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.