CVE-2024-41016: linux kernel before 4.19.323 (exclusive), from 4.20 (inclusive), before 5.4.285 (exclusive), from 5.5 (inclusive)…

Affected technology

linux kernel · before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.112 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.53 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.12 (exclusive)
linux

Linux · cf1d6c763fbcb115263114302485ad17e7933d87 to before e2b3d7a9d019d4d1a0da6c3ea64a1ff79c99c090, cf1d6c763fbcb115263114302485ad17e7933d87 to before e8f9c4af7af7e9e4cd09c0251c7936593147419f, cf1d6c763fbcb115263114302485ad17e7933d87 to before 57a3d89831fcaa2cdbe024b47c7c36d5a56c3637, cf1d6c763fbcb115263114302485ad17e7933d87 to before c031d286eceb82f72f8623b7f4abd2aa491bfb5e, cf1d6c763fbcb115263114302485ad17e7933d87 to before cfb926051fab19b10d1e65976211f364aa820180, cf1d6c763fbcb115263114302485ad17e7933d87 to before c726dea9d0c806d64c26fcef483b1fb9474d8c5e, cf1d6c763fbcb115263114302485ad17e7933d87 to before e4ffea01adf3323c821b6f37e9577d2d400adbaa, cf1d6c763fbcb115263114302485ad17e7933d87 to before af77c4fc1871847b528d58b7fdafb4aa1f6a9262
Linux

Linux · 2.6.28
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/ocfs2/xattr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.