CVE-2024-40959: linux kernel from 2.6.12 (inclusive), before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive)…

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.96 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.36 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.7 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

linux kernel · 6.10 · update rc4
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c71761292d4d002a8eccb57b86792c4e3b3eb3c7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before caf0bec84c62fb1cf6f7c9f0e8c857c87f8adbc3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 20427b85781aca0ad072851f6907a3d4b2fed8d1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9f30f1f1a51d91e19f5a09236bb0b59e6a07ad08, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 83c02fb2cc0afee5bb53cddf3f34f045f654ad6a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f897d7171652fcfc76d042bfec798b010ee89e41, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 600a62b4232ac027f788c3ca395bc2333adeaacf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d46401052c2d5614da8efea5788532f0401cb164
Linux

Linux · 2.6.12
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv6/xfrm6_policy.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.