CVE-2024-40901: linux kernel from 4.10 (inclusive), before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive)…

Affected technology

linux kernel · from 4.10 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.95 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.35 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.6 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

Linux · c696f7b83edeac804e898952058089143f49ca0a to before e9bce7c751f6d6c7be88c0bc081a66aaf61a23ee, c696f7b83edeac804e898952058089143f49ca0a to before 19649e49a6df07cd2e03e0a11396fd3a99485ec2, c696f7b83edeac804e898952058089143f49ca0a to before 0081d2b3ae0a17a86b8cc0fa3c8bdc54e233ba16, c696f7b83edeac804e898952058089143f49ca0a to before 521f333e644c4246ca04a4fc4772edc53dd2a801, c696f7b83edeac804e898952058089143f49ca0a to before 46bab2bcd771e725ff5ca3a68ba68cfeac45676c, c696f7b83edeac804e898952058089143f49ca0a to before 9079338c5a0d1f1fee34fb1c9e99b754efe414c5, c696f7b83edeac804e898952058089143f49ca0a to before 18abb5db0aa9b2d48f7037a88b41af2eef821674, c696f7b83edeac804e898952058089143f49ca0a to before 4254dfeda82f20844299dca6c38cbffcfd499f41
Linux

Linux · 4.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: drivers/scsi/mpt3sas/mpt3sas_base.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality impact as low; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.