CVE-2024-36894: linux kernel from 3.15 (inclusive), before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive)…

Affected technology

linux kernel · from 3.15 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.95 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.31 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

Linux · 2e4c7553cd6f9c68bb741582dcb614edcbeca70f to before f71a53148ce34898fef099b75386a3a9f4449311, 2e4c7553cd6f9c68bb741582dcb614edcbeca70f to before 9e72ef59cbe61cd1243857a6418ca92104275867, 2e4c7553cd6f9c68bb741582dcb614edcbeca70f to before e500b1c4e29ad0bd1c1332a1eaea2913627a92dd, 2e4c7553cd6f9c68bb741582dcb614edcbeca70f to before 3613e5023f09b3308545e9d1acda86017ebd418a, 2e4c7553cd6f9c68bb741582dcb614edcbeca70f to before a0fdccb1c9e027e3195f947f61aa87d6d0d2ea14, 2e4c7553cd6f9c68bb741582dcb614edcbeca70f to before 73c05ad46bb4fbbdb346004651576d1c8dbcffbb, 2e4c7553cd6f9c68bb741582dcb614edcbeca70f to before d7461830823242702f5d84084bcccb25159003f4, 2e4c7553cd6f9c68bb741582dcb614edcbeca70f to before 24729b307eefcd7c476065cd7351c1a018082c19
Linux

Linux · 3.15
Linux

linux_kernel · 2e4c7553cd6f to before 73c05ad46bb4
linux

linux_kernel · 2e4c7553cd6f to before d74618308232
linux

linux_kernel · 2e4c7553cd6f to before 24729b307eef, 2e4c7553cd6f to before f71a53148ce3, 2e4c7553cd6f to before 9e72ef59cbe6, 2e4c7553cd6f to before e500b1c4e29a, 2e4c7553cd6f to before 3613e5023f09, 2e4c7553cd6f to before a0fdccb1c9e0, 3.15
linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: driver
File: drivers/usb/gadget/function/f_fs.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Physical access · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.6/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.