CVE-2024-36286: linux kernel from 2.6.25 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 2.6.25 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.4 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

Linux · 9872bec773c2e8503fec480c1e8a0c732517e257 to before 8658bd777cbfcb0c13df23d0ea120e70517761b9, 9872bec773c2e8503fec480c1e8a0c732517e257 to before 3989b817857f4890fab9379221a9d3f52bf5c256, 9872bec773c2e8503fec480c1e8a0c732517e257 to before e01065b339e323b3dfa1be217fd89e9b3208b0ab, 9872bec773c2e8503fec480c1e8a0c732517e257 to before 25ea5377e3d2921a0f96ae2551f5ab1b36825dd4, 9872bec773c2e8503fec480c1e8a0c732517e257 to before 68f40354a3851df46c27be96b84f11ae193e36c5, 9872bec773c2e8503fec480c1e8a0c732517e257 to before 8f365564af898819a523f1a8cf5c6ce053e9f718, 9872bec773c2e8503fec480c1e8a0c732517e257 to before 215df6490e208bfdd5b3012f5075e7f8736f3e7a, 9872bec773c2e8503fec480c1e8a0c732517e257 to before dc21c6cc3d6986d938efbf95de62473982c98dec
Linux

Linux · 2.6.25
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/netfilter/nfnetlink_queue.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.