CVE-2024-39292: linux kernel before 2.6.23 (exclusive), from 4.19 (inclusive), before 4.19.316 (exclusive), from 5.4 (inclusive)…

Affected technology

linux kernel · before 2.6.23 (exclusive)
linux

linux kernel · from 4.19 (inclusive), before 4.19.316 (exclusive)
linux

linux kernel · from 5.4 (inclusive), before 5.4.278 (exclusive)
linux

linux kernel · from 5.10 (inclusive), before 5.10.219 (exclusive)
linux

linux kernel · from 5.15 (inclusive), before 5.15.161 (exclusive)
linux

linux kernel · from 6.1 (inclusive), before 6.1.93 (exclusive)
linux

linux kernel · from 6.6 (inclusive), before 6.6.33 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.9.4 (exclusive)
linux

linux kernel · 6.10.0 · update rc1
linux

Linux · 42a359e31a0e438b5b978a8f0fecdbd3c86bb033 to before 66ea9a7c6824821476914bed21a476cd20094f33, 42a359e31a0e438b5b978a8f0fecdbd3c86bb033 to before dc1ff95602ee908fcd7d8acee7a0dadb61b1a0c0, 42a359e31a0e438b5b978a8f0fecdbd3c86bb033 to before 351d1a64544944b44732f6a64ed65573b00b9e14, 42a359e31a0e438b5b978a8f0fecdbd3c86bb033 to before 31960d991e43c8d6dc07245f19fc13398e90ead2, 42a359e31a0e438b5b978a8f0fecdbd3c86bb033 to before 0c02d425a2fbe52643a5859a779db0329e7dddd4, 42a359e31a0e438b5b978a8f0fecdbd3c86bb033 to before 434a06c38ee1217a8baa0dd7c37cc85d50138fb0, 42a359e31a0e438b5b978a8f0fecdbd3c86bb033 to before 73b8e21f76c7dda4905655d2e2c17dc5a73b87f1, 42a359e31a0e438b5b978a8f0fecdbd3c86bb033 to before a0fbbd36c156b9f7b2276871d499c9943dfe5101
Linux

Linux · 2.6.23
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: arch/um/drivers/line.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.