CVE-2024-38589: linux kernel from 2.6.12 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.12 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.3 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b9d663fbf74290cb68fbc66ae4367bd56837ad1d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1fbfb483c1a290dce3f41f52d45cc46dd88b7691, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b117e5b4f27c2c9076561b6be450a9619f0b79de, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 421c50fa81836775bf0fd6ce0e57a6eb27af24d5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3db2fc45d1d2a6457f06ebdfd45b9820e5b5c2b7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f28bdc2ee5d9300cc77bd3d97b5b3cdd14960fd8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5fb7e2a4335fc67d6952ad2a6613c46e0b05f7c5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5bc50a705cfac8f64ce51c95611c3dd0554ef9c3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e03e7f20ebf7e1611d40d1fdc1bde900fd3335f6
Linux

Linux · 2.6.12
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/netrom/nr_route.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.