CVE-2024-41046: linux kernel from 3.0 (inclusive), before 4.19.318 (exclusive), from 4.20 (inclusive), before 5.4.280 (exclusive)…

Affected technology

linux kernel · from 3.0 (inclusive), before 4.19.318 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.280 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.222 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.163 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.100 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.41 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.10 (exclusive)
linux

Linux · 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 1a2db00a554cfda57c397cce79b2804bf9633fec, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 907443174e76b854d28024bd079f0e53b94dc9a1, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 22b16618a80858b3a9d607708444426948cc4ae1, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 69ad5fa0ce7c548262e0770fc2b726fe7ab4f156, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before c2b66e2b3939af63699e4a4bd25a8ac4a9b1d1b3, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 9d23909ae041761cb2aa0c3cb1748598d8b6bc54, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 84aaaa796a19195fc59290154fef9aeb1fba964f, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before e1533b6319ab9c3a97dad314dd88b3783bc41b69
Linux

Linux · 3.0
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - BIOS · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/lantiq_etop.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.