CVE-2024-39503: linux kernel 6.8; +4 more affected products

Affected technology

linux kernel · from 5.4.269 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.10.210 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.15.149 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 6.1.79 (inclusive), before 6.1.95 (exclusive)
linux

linux kernel · from 6.6.18 (inclusive), before 6.6.35 (exclusive)
linux

linux kernel · from 6.7.6 (inclusive), before 6.8 (exclusive)
linux

linux kernel · from 6.8.1 (inclusive), before 6.9.6 (exclusive)
linux

linux kernel · 6.8
linux

linux kernel · 6.8 · update rc3
linux

linux kernel · 6.8 · update rc4
linux

linux kernel · 6.8 · update rc5
linux

linux kernel · 6.8 · update rc6
linux

linux kernel · 6.8 · update rc7
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

Linux · c7f2733e5011bfd136f1ca93497394d43aa76225 to before c0761d1f1ce1d5b85b5e82bbb714df12de1aa8c3, a24d5f2ac8ef702a58e55ec276aad29b4bd97e05 to before 93b53c202b51a69e42ca57f5a183f7e008e19f83, c2dc077d8f722a1c73a24e674f925602ee5ece49 to before 0f1bb77c6d837c9513943bc7c08f04c5cc5c6568, 653bc5e6d9995d7d5f497c665b321875a626161c to before 390b353d1a1da3e9c6c0fd14fe650d69063c95d6, b93a6756a01f4fd2f329a39216f9824c56a66397 to before 2ba35b37f780c6410bb4bba9c3072596d8576702, 97f7cf1cd80eeed3b7c808b7c12463295c751001 to before 90ae20d47de602198eb69e6cd7a3db3420abfc08, 97f7cf1cd80eeed3b7c808b7c12463295c751001 to before 4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10, 970709a67696b100a57b33af1a3d75fc34b747eb, 5.4.269 to before 5.4.279, 5.10.210 to before 5.10.221, 5.15.149 to before 5.15.162, 6.1.79 to before 6.1.95, 6.6.18 to before 6.6.35, 6.7.6 to before 6.8
Linux

Linux · 6.8
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/netfilter/ipset/ip_set_core.c, net/netfilter/ipset/ip_set_list_set.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.