CVE-2024-42154: linux kernel from 3.14 (inclusive), before 4.19.318 (exclusive), from 4.20 (inclusive), before 5.4.280 (exclusive)…

Affected technology

linux kernel · from 3.14 (inclusive), before 4.19.318 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.280 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.222 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.163 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.98 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.39 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.9 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

linux kernel · 6.10 · update rc4
linux

linux kernel · 6.10 · update rc5
linux

linux kernel · 6.10 · update rc6
linux

Linux · 3e7013ddf55af7bc191792b8aea0c2b94fb0fef5 to before 19d997b59fa1fd7a02e770ee0881c0652b9c32c9, 3e7013ddf55af7bc191792b8aea0c2b94fb0fef5 to before 2a2e79dbe2236a1289412d2044994f7ab419b44c, 3e7013ddf55af7bc191792b8aea0c2b94fb0fef5 to before cdffc358717e436bb67122bb82c1a2a26e050f98, 3e7013ddf55af7bc191792b8aea0c2b94fb0fef5 to before ef7c428b425beeb52b894e16f1c4b629d6cebfb6, 3e7013ddf55af7bc191792b8aea0c2b94fb0fef5 to before 31f03bb04146c1c6df6c03e9f45401f5f5a985d3, 3e7013ddf55af7bc191792b8aea0c2b94fb0fef5 to before 8c2debdd170e395934ac0e039748576dfde14e99, 3e7013ddf55af7bc191792b8aea0c2b94fb0fef5 to before 3d550dd5418729a6e77fe7721d27adea7152e321, 3e7013ddf55af7bc191792b8aea0c2b94fb0fef5 to before 66be40e622e177316ae81717aa30057ba9e61dff
Linux

Linux · 3.14
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - BIOS · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv4/tcp_metrics.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.4/10) rates confidentiality and integrity impact as low; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.