CVE-2024-38558: linux kernel from 4.11 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 4.11 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before 6a51ac92bf35d34b4996d6eb67e2fe469f573b11, 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before 0b532f59437f688563e9c58bdc1436fefa46e3b5, 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before 5ab6aecbede080b44b8e34720ab72050bf1e6982, 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before 483eb70f441e2df66ade78aa7217e6e4caadfef3, 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before 9ec8b0ccadb908d92f7ee211a4eff05fd932f3f6, 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before 78741b4caae1e880368cb2f5110635f3ce45ecfd, 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before 431e9215576d7b728f3f53a704d237a520092120, 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before d73fb8bddf89503c9fae7c42e50d44c89909aad6, 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc to before 7c988176b6c16c516474f6fceebe0f055af5eb56
Linux

Linux · 4.11
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/openvswitch/flow.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.