CVE-2024-36940: linux kernel from 4.11 (inclusive), before 4.19.314 (exclusive), from 4.20 (inclusive), before 5.4.276 (exclusive)…

Affected technology

linux kernel · from 4.11 (inclusive), before 4.19.314 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.276 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.217 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.159 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.91 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.31 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

debian linux · 10.0
debian

Linux · 6118714275f0a313ecc296a87ed1af32d9691bed to before 735f4c6b6771eafe336404c157ca683ad72a040d, 6118714275f0a313ecc296a87ed1af32d9691bed to before cdaa171473d98962ae86f2a663d398fda2fbeefd, 6118714275f0a313ecc296a87ed1af32d9691bed to before 288bc4aa75f150d6f1ee82dd43c6da1b438b6068, 6118714275f0a313ecc296a87ed1af32d9691bed to before 41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca, 6118714275f0a313ecc296a87ed1af32d9691bed to before ac7d65795827dc0cf7662384ed27caf4066bd72e, 6118714275f0a313ecc296a87ed1af32d9691bed to before 558c8039fdf596a584a92c171cbf3298919c448c, 6118714275f0a313ecc296a87ed1af32d9691bed to before f9f1e321d53e4c5b666b66e5b43da29841fb55ba, 6118714275f0a313ecc296a87ed1af32d9691bed to before 5038a66dad0199de60e5671603ea6623eb9e5c79
Linux

Linux · 4.11
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: frees
File: drivers/pinctrl/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.