CVE-2024-35982: linux kernel from 3.13 (inclusive), before 4.19.313 (exclusive), from 4.20 (inclusive), before 5.4.275 (exclusive)…

Affected technology

linux kernel · from 3.13 (inclusive), before 4.19.313 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.275 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.216 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.156 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.87 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.28 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.7 (exclusive)
linux

Linux · a19d3d85e1b854e4a483a55d740a42458085560d to before 04720ea2e6c64459a90ca28570ea78335eccd924, a19d3d85e1b854e4a483a55d740a42458085560d to before b3ddf6904073990492454b1dd1c10a24be8c74c6, a19d3d85e1b854e4a483a55d740a42458085560d to before 70a8be9dc2fb65d67f8c1e0c88c587e08e2e575d, a19d3d85e1b854e4a483a55d740a42458085560d to before 87b6af1a7683e021710c08fc0551fc078346032f, a19d3d85e1b854e4a483a55d740a42458085560d to before 3fe79b2c83461edbbf86ed8a6f3924820ff89259, a19d3d85e1b854e4a483a55d740a42458085560d to before 4ca2a5fb54ea2cc43edea614207fcede562d91c2, a19d3d85e1b854e4a483a55d740a42458085560d to before ca54e2671548616ad34885f90d4f26f7adb088f0, a19d3d85e1b854e4a483a55d740a42458085560d to before b1f532a3b1e6d2e5559c7ace49322922637a28aa
Linux

Linux · 3.13
Linux

linux_kernel · 3.13
linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: will
File: net/batman-adv/translation-table.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.1/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.