CVE-2024-38662: linux kernel from 5.10 (inclusive), before 5.10.219 (exclusive), from 5.15 (inclusive), before 5.15.161 (exclusive)…

Affected technology

linux kernel · from 5.10 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.15 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 6.1 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.6 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.4 (exclusive)
linux

linux kernel · 6.10.0 · update rc1
linux

Linux · dd54b48db0c822ae7b520bc80751f0a0a173ef75 to before 29467edc23818dc5a33042ffb4920b49b090e63d, d1e73fb19a4c872d7a399ad3c66e8ca30e0875ec to before 11e8ecc5b86037fec43d07b1c162e233e131b1d9, a44770fed86515eedb5a7c00b787f847ebb134a5 to before 6693b172f008846811f48a099f33effc26068e1e, 668b3074aa14829e2ac2759799537a93b60fef86 to before 000a65bf1dc04fb2b65e2abf116f0bc0fc2ee7b1, ff91059932401894e6c86341915615c5eb0eca48 to before b81e1c5a3c70398cf76631ede63a03616ed1ba3c, ff91059932401894e6c86341915615c5eb0eca48 to before 98e948fb60d41447fd8d2d0c3b8637fc6b6dc26d, f7990498b05ac41f7d6a190dc0418ef1d21bf058, 6af057ccdd8e7619960aca1f0428339f213b31cd, 5.10.215 to before 5.10.219, 5.15.154 to before 5.15.161, 6.1.85 to before 6.1.93, 6.6.26 to before 6.6.33, 5.4.274 to before 5.5, 6.8.5 to before 6.9
Linux

Linux · 6.9
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: kernel/bpf/verifier.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.