CVE-2024-36020: linux kernel 6.1; +3 more affected products

Affected technology

linux kernel · from 4.19.264 (inclusive), before 4.19.312 (exclusive)
linux

linux kernel · from 5.4.223 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.10.153 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.15.77 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 6.0.7 (inclusive), before 6.1 (exclusive)
linux

linux kernel · from 6.1.1 (inclusive), before 6.1.85 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.26 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.5 (exclusive)
linux

linux kernel · 6.1
linux

linux kernel · 6.1 · update rc3
linux

linux kernel · 6.1 · update rc4
linux

linux kernel · 6.1 · update rc5
linux

linux kernel · 6.1 · update rc6
linux

linux kernel · 6.1 · update rc7
linux

linux kernel · 6.1 · update rc8
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

debian linux · 10.0
debian

Linux · 76ed715836c6994bac29d9638e9314e6e3b08651 to before cc9cd02dd9e8b7764ea9effb24f4f1dd73d1b23d, e88c2a1e28c5475065563d66c07ca879a9afbd07 to before 9dcf0fcb80f6aeb01469e3c957f8d4c97365450a, 9abae363af5ced6adbf04c14366289540281fb26 to before b8e82128b44fa40bf99a50b919488ef361e1683c, c39de3ae5075ea5f78e097cb5720d4e52d5caed9 to before 951d2748a2a8242853abc3d0c153ce4bf8faad31, 52424f974bc53c26ba3f00300a00e9de9afcd972 to before 3e89846283f3cf7c7a8e28b342576fd7c561d2ba, 52424f974bc53c26ba3f00300a00e9de9afcd972 to before 0dcf573f997732702917af1563aa2493dc772fc0, 52424f974bc53c26ba3f00300a00e9de9afcd972 to before 06df7618f591b2dc43c59967e294d7b9fc8675b6, 52424f974bc53c26ba3f00300a00e9de9afcd972 to before f37c4eac99c258111d414d31b740437e1925b8e8, 02f949747e6fb767b29f7931d4bbf40911684e7a, 4.19.264 to before 4.19.312, 5.4.223 to before 5.4.274, 5.10.153 to before 5.10.215, 5.15.77 to before 5.15.154, 6.0.7 to before 6.1
Linux

Linux · 6.1
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: warning, before, instead
File: drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.