CVE-2024-38619: linux kernel from 2.6.16 (inclusive), before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive)…

Affected technology

linux kernel · from 2.6.16 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.95 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.35 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.6 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

Linux · e80b0fade09ef1ee67b0898d480d4c588f124d5f to before e0aab7b07a9375337847c9d74a5ec044071e01c8, e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 51fe16c058acb22f847e69bc598066ed0bcd5c15, e80b0fade09ef1ee67b0898d480d4c588f124d5f to before f68820f1256b21466ff094dd97f243b7e708f9c1, e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 3eee13ab67f65606faa66e0c3c729e4f514838fd, e80b0fade09ef1ee67b0898d480d4c588f124d5f to before e0e2eec76920a133dd49a4fbe4656d83596a1361, e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 2cc32639ec347e3365075b130f9953ef16cb13f1, e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 24bff7f714bdff97c2a75a0ff6a368cdf8ad5af4, e80b0fade09ef1ee67b0898d480d4c588f124d5f to before 16637fea001ab3c8df528a8995b3211906165a30
Linux

Linux · 2.6.16
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/usb/storage/alauda.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.