CVE-2024-38587: linux kernel from 4.19.313 (inclusive), before 4.19.316 (exclusive), from 5.4.275 (inclusive), before 5.4.278…

Affected technology

linux kernel · from 4.19.313 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 5.4.275 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.10.216 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.15.157 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 6.1.88 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.6.29 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.8.8 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · 756c5cb7c09e537b87b5d3acafcb101b2ccf394f to before 42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358, 8f6b62125befe1675446923e4171eac2c012959c to before cd7f3978c2ec741aedd1d860b2adb227314cf996, 6401038acfa24cba9c28cce410b7505efadd0222 to before 07ef95cc7a579731198c93beed281e3a79a0e586, 0d130158db29f5e0b3893154908cf618896450a8 to before 504178fb7d9f6cdb0496d5491efb05f45597e535, 89af25bd4b4bf6a71295f07e07a8ae7dc03c6595 to before 3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e, 8defb1d22ba0395b81feb963b96e252b097ba76f to before c6e1650cf5df1bd6638eeee231a683ef30c7d4eb, 0efb15c14c493263cb3a5f65f5ddfd4603d19a76 to before eb1ea64328d4cc7d7a912c563f8523d5259716ef, c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 to before d52c04474feac8e305814a5228e622afe481b2ef, c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 to before 008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b, 4.19.313 to before 4.19.316, 5.4.275 to before 5.4.278, 5.10.216 to before 5.10.219, 5.15.157 to before 5.15.161, 6.1.88 to before 6.1.93, 6.6.29 to before 6.6.33, 6.8.8 to before 6.8.12
Linux

Linux · 6.9
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/accessibility/speakup/main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.3/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.