CVE-2024-38659: linux kernel from 2.6.35 (inclusive), before 4.19.316 (exclusive), from 4.20 (inclusive), before 5.4.278 (exclusive)…

Affected technology

linux kernel · from 2.6.35 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.4 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

Linux · f8bd909183acffad68780b10c1cdf36161cfd5d1 to before 2b649d7e0cb42a660f0260ef25fd55fdc9c6c600, f8bd909183acffad68780b10c1cdf36161cfd5d1 to before ca63fb7af9d3e531aa25f7ae187bfc6c7166ec2d, f8bd909183acffad68780b10c1cdf36161cfd5d1 to before 3c0d36972edbe56fcf98899622d9b90ac9965227, f8bd909183acffad68780b10c1cdf36161cfd5d1 to before 25571a12fbc8a1283bd8380d461267956fd426f7, f8bd909183acffad68780b10c1cdf36161cfd5d1 to before 7077c22f84f41974a711604a42fd0e0684232ee5, f8bd909183acffad68780b10c1cdf36161cfd5d1 to before f6638e955ca00c489894789492776842e102af9c, f8bd909183acffad68780b10c1cdf36161cfd5d1 to before aee1955a1509a921c05c70dad5d6fc8563dfcb31, f8bd909183acffad68780b10c1cdf36161cfd5d1 to before e8021b94b0412c37bcc79027c2e382086b6ce449
Linux

Linux · 2.6.35
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: do_setlink
File: drivers/net/ethernet/cisco/enic/enic_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.