CVE-2024-38578: linux kernel from 2.6.21 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 2.6.21 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · dddfa461fc8951f9b5f951c13565b6cac678635a to before 1c125b9287e58f364d82174efb167414b92b11f1, dddfa461fc8951f9b5f951c13565b6cac678635a to before 235b85981051cd68fc215fd32a81c6f116bfc4df, dddfa461fc8951f9b5f951c13565b6cac678635a to before edbfc42ab080e78c6907d40a42c9d10b69e445c1, dddfa461fc8951f9b5f951c13565b6cac678635a to before 12db25a54ce6bb22b0af28010fff53ef9cb3fe93, dddfa461fc8951f9b5f951c13565b6cac678635a to before 0d0f8ba042af16519f1ef7dd10463a33b21b677c, dddfa461fc8951f9b5f951c13565b6cac678635a to before 2ed750b7ae1b5dc72896d7dd114c419afd3d1910, dddfa461fc8951f9b5f951c13565b6cac678635a to before a20f09452e2f58f761d11ad7b96b5c894c91030e, dddfa461fc8951f9b5f951c13565b6cac678635a to before f6008487f1eeb8693f8d2a36a89c87d9122ddf74, dddfa461fc8951f9b5f951c13565b6cac678635a to before 85a6a1aff08ec9f5b929d345d066e2830e8818e5
Linux

Linux · 2.6.21
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/ecryptfs/keystore.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.