CVE-2024-36922: linux kernel before 6.6.31 (exclusive), from 6.7 (inclusive), before 6.8.10 (exclusive), 6.9 · update rc1; +2 more…

Affected technology

linux kernel · before 6.6.31 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

Linux · 7b3e42ea2eadd41cc9d6363a9813b8ba8ab6f0e6 to before f30e8af109818c9db08cbcc46eb9713fe4b530ba, 7b3e42ea2eadd41cc9d6363a9813b8ba8ab6f0e6 to before aab7b39fcac5f6165f6434bcbb56bb7865d4ad2b, 7b3e42ea2eadd41cc9d6363a9813b8ba8ab6f0e6 to before b83db8e756dec68a950ed2f056248b1704b3deaa, 7b3e42ea2eadd41cc9d6363a9813b8ba8ab6f0e6 to before 43d07103df670484cdd26f9588eabef80f69db89, 7b3e42ea2eadd41cc9d6363a9813b8ba8ab6f0e6 to before c2ace6300600c634553657785dfe5ea0ed688ac2
Linux

Linux · 4.19
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/net/wireless/intel/iwlwifi/queue/tx.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.