CVE-2024-37356: linux kernel from 3.18 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 3.18 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.4 (exclusive)
linux

Linux · e3118e8359bb7c59555aca60c725106e6d78c5ce to before 06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6, e3118e8359bb7c59555aca60c725106e6d78c5ce to before 6aacaa80d962f4916ccf90e2080306cec6c90fcf, e3118e8359bb7c59555aca60c725106e6d78c5ce to before e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31, e3118e8359bb7c59555aca60c725106e6d78c5ce to before 8602150286a2a860a1dc55cbd04f99316f19b40a, e3118e8359bb7c59555aca60c725106e6d78c5ce to before e65d13ec00a738fa7661925fd5929ab3c765d4be, e3118e8359bb7c59555aca60c725106e6d78c5ce to before 02261d3f9dc7d1d7be7d778f839e3404ab99034c, e3118e8359bb7c59555aca60c725106e6d78c5ce to before 237340dee373b97833a491d2e99fcf1d4a9adafd, e3118e8359bb7c59555aca60c725106e6d78c5ce to before 3ebc46ca8675de6378e3f8f40768e180bb8afa66
Linux

Linux · 3.18
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv4/tcp_dctcp.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.