CVE-2024-36904: linux kernel from 4.16 (inclusive), before 4.19.314 (exclusive), from 4.20 (inclusive), before 5.4.276 (exclusive)…

Affected technology

linux kernel · from 4.16 (inclusive), before 4.19.314 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.276 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.217 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.159 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.91 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.31 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

linux kernel · 6.9 · update rc7
linux

debian linux · 10.0
debian

Linux · ec94c2696f0bcd5ae92a553244e4ac30d2171a2d to before 84546cc1aeeb4df3e444b18a4293c9823f974be9, ec94c2696f0bcd5ae92a553244e4ac30d2171a2d to before 1796ca9c6f5bd50554214053af5f47d112818ee3, ec94c2696f0bcd5ae92a553244e4ac30d2171a2d to before 1d9cf07810c30ef7948879567d10fd1f01121d34, ec94c2696f0bcd5ae92a553244e4ac30d2171a2d to before 27b0284d8be182a81feb65581ab6a724dfd596e8, ec94c2696f0bcd5ae92a553244e4ac30d2171a2d to before 13ed7cdf079686ccd3618335205700c03f6fb446, ec94c2696f0bcd5ae92a553244e4ac30d2171a2d to before 6e48faad92be13166184d21506e4e54c79c13adc, ec94c2696f0bcd5ae92a553244e4ac30d2171a2d to before 517e32ea0a8c72202d0d8aa8df50a7cd3d6fdefc, ec94c2696f0bcd5ae92a553244e4ac30d2171a2d to before f2db7230f73a80dbb179deab78f88a7947f0ab7e
Linux

Linux · 4.16
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv4/tcp_ipv4.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.