CVE-2024-42097: linux kernel before 4.19.317 (exclusive), from 4.20 (inclusive), before 5.4.279 (exclusive), from 5.5 (inclusive)…

Affected technology

linux kernel · before 4.19.317 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.97 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.37 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.8 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40d7def67841343c10f8642a41031fecbb248bab, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 79d9a000f0220cdaba1682d2a23c0d0c61d620a3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d23982ea9aa438f35a8c8a6305943e98a8db90f6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7a18293fd8d8519c2f7a03753bc1583b18e3db69, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d0ff2443fcbb472206d45a5d2a90cc694065804e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d8f5ce3cb9adf0c72e2ad6089aba02d7a32469c2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 87039b83fb7bfd7d0e0499aaa8e6c049906b4d14, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 89b32ccb12ae67e630c6453d778ec30a592a212f
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: sound/synth/emux/soundfont.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.