CVE-2024-38579: linux kernel from 4.11 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 4.11 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before c256b616067bfd6d274c679c06986b78d2402434, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before e719c8991c161977a67197775067ab456b518c7b, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ebed0d666fa709bae9e8cafa8ec6e7ebd1d318c6, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before c69a1e4b419c2c466dd8c5602bdebadc353973dd, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 49833a8da6407e7e9b532cc4054fdbcaf78f5fdd, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before d0f14ae223c2421b334c1f1a9e48f1e809aee3a0, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before c0082ee420639a97e40cae66778b02b341b005e5, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 3b7a40740f04e2f27114dfd6225c5e721dda9d57, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 2b3460cbf454c6b03d7429e9ffc4fe09322eb1a9
Linux

Linux · 4.11
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/crypto/bcm/spu2.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.