CVE-2024-42162: linux kernel from 5.3 (inclusive), through 6.9.9 (inclusive); +1 more affected products

Affected technology

linux kernel · from 5.3 (inclusive), through 6.9.9 (inclusive)
linux

Linux · 2f523dc34ac8c355609e9b847852bf25bbdb30bf to before acf609843a848e2c22ccce98eef109330403380d, 2f523dc34ac8c355609e9b847852bf25bbdb30bf to before 32675d828c8a392e20d5b42375ed112c407e4b62, 2f523dc34ac8c355609e9b847852bf25bbdb30bf to before af9bcf910b1f86244f39e15e701b2dc564b469a6
Linux

Linux · 5.10
Linux

Component: Not specified by the source
File: drivers/net/ethernet/google/gve/gve_ethtool.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.