CVE-2024-40984: linux kernel from 2.6.32 (inclusive), before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive)…

Affected technology

linux kernel · from 2.6.32 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.96 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.36 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.7 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

linux kernel · 6.10 · update rc4
linux

Linux · d410ee5109a1633a686a5663c6743a92e1181f9b to before 435ecc978c3d5d0c4e172ec5b956dc1904061d98, d410ee5109a1633a686a5663c6743a92e1181f9b to before ae465109d82f4fb03c5adbe85f2d6a6a3d59124c, d410ee5109a1633a686a5663c6743a92e1181f9b to before 6eca23100e9030725f69c1babacd58803f29ec8d, d410ee5109a1633a686a5663c6743a92e1181f9b to before dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f, d410ee5109a1633a686a5663c6743a92e1181f9b to before ddc1f5f124479360a1fd43f73be950781d172239, d410ee5109a1633a686a5663c6743a92e1181f9b to before 434c6b924e1f4c219aab2d9e05fe79c5364e37d3, d410ee5109a1633a686a5663c6743a92e1181f9b to before e21a4c9129c72fa54dd00f5ebf71219b41d43c04, d410ee5109a1633a686a5663c6743a92e1181f9b to before a83e1385b780d41307433ddbc86e3c528db031f0
Linux

Linux · 2.6.32
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/acpi/acpica/exregion.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.