CVE-2024-39487: linux kernel from 3.13 (inclusive), before 4.19.318 (exclusive), from 4.20 (inclusive), before 5.4.280 (exclusive)…

Affected technology

linux kernel · from 3.13 (inclusive), before 4.19.318 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.280 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.222 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.163 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.98 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.39 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.9 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

linux kernel · 6.10 · update rc4
linux

linux kernel · 6.10 · update rc5
linux

linux kernel · 6.10 · update rc6
linux

Linux · f9de11a165943a55e0fbda714caf60eaeb276a42 to before 6a8a4fd082c439e19fede027e80c79bc4c84bb8e, f9de11a165943a55e0fbda714caf60eaeb276a42 to before 6b21346b399fd1336fe59233a17eb5ce73041ee1, f9de11a165943a55e0fbda714caf60eaeb276a42 to before 707c85ba3527ad6aa25552033576b0f1ff835d7b, f9de11a165943a55e0fbda714caf60eaeb276a42 to before bfd14e5915c2669f292a31d028e75dcd82f1e7e9, f9de11a165943a55e0fbda714caf60eaeb276a42 to before c8eb8ab9a44ff0e73492d0a12a643c449f641a9f, f9de11a165943a55e0fbda714caf60eaeb276a42 to before b75e33eae8667084bd4a63e67657c6a5a0f8d1e8, f9de11a165943a55e0fbda714caf60eaeb276a42 to before 9f835e48bd4c75fdf6a9cff3f0b806a7abde78da, f9de11a165943a55e0fbda714caf60eaeb276a42 to before e271ff53807e8f2c628758290f0e499dbe51cb3d
Linux

Linux · 3.13
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
Function: bond_option_arp_ip_targets_set
File: drivers/net/bonding/bond_options.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.