CVE-2024-38565: linux kernel from 3.8 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 3.8 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · b7d572e1871df06a96a1c9591c71c5494ff6b624 to before 79ddf5f2020fd593d50f1363bb5131283d74f78f, b7d572e1871df06a96a1c9591c71c5494ff6b624 to before 68a5a00c5d38978a3f8460c6f182f7beec8688ff, b7d572e1871df06a96a1c9591c71c5494ff6b624 to before ee25389df80138907bc9dcdf4a2be2067cde9a81, b7d572e1871df06a96a1c9591c71c5494ff6b624 to before b4c24de37a6bb383394a6fef2b85a6db41d426f5, b7d572e1871df06a96a1c9591c71c5494ff6b624 to before 34f7ebff1b9699e0b89fa58b693bc098c2f5ec72, b7d572e1871df06a96a1c9591c71c5494ff6b624 to before b33a81e4ecfb022b028cae37d1c1ce28ac1b359d, b7d572e1871df06a96a1c9591c71c5494ff6b624 to before beeed260b92af158592f5e8d2dab65dae45c6f70, b7d572e1871df06a96a1c9591c71c5494ff6b624 to before 7bbf76c9bb2c58375e183074e44f9712483f0603, b7d572e1871df06a96a1c9591c71c5494ff6b624 to before e120b6388d7d88635d67dcae6483f39c37111850
Linux

Linux · 3.8
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/ath/ar5523/ar5523.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.