CVE-2024-40960: linux kernel from 2.6.17 (inclusive), before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive)…

Affected technology

linux kernel · from 2.6.17 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.96 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.36 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.7 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

linux kernel · 6.10 · update rc4
linux

Linux · 52e1635631b342803aecaf81a362c1464e3da2e5 to before f0cda984e4e634b221dbf9642b8ecc5b4806b41e, 52e1635631b342803aecaf81a362c1464e3da2e5 to before d66fc4826127c82f99c4033380f8e93833d331c7, 52e1635631b342803aecaf81a362c1464e3da2e5 to before 1ed9849fdf9a1a617129346b11d2094ca26828dc, 52e1635631b342803aecaf81a362c1464e3da2e5 to before 569c9d9ea6648d099187527b93982f406ddcebc0, 52e1635631b342803aecaf81a362c1464e3da2e5 to before 51ee2f7c30790799d0ec30c0ce0c743e58f046f2, 52e1635631b342803aecaf81a362c1464e3da2e5 to before 73e7c8ca6ad76f29b2c99c20845a6f3b203ff0c6, 52e1635631b342803aecaf81a362c1464e3da2e5 to before 6eed6d3cd19ff3cfa83aeceed86da14abaf7417b, 52e1635631b342803aecaf81a362c1464e3da2e5 to before b86762dbe19a62e785c189f313cda5b989931f37
Linux

Linux · 2.6.17
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/ipv6/route.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.