CVE-2024-42272: linux kernel from 5.10.221 (inclusive), before 5.10.224 (exclusive), from 5.15.162 (inclusive), before 5.15.165…

Affected technology

linux kernel · from 5.10.221 (inclusive), before 5.10.224 (exclusive)
linux

linux kernel · from 5.15.162 (inclusive), before 5.15.165 (exclusive)
linux

linux kernel · from 6.1.96 (inclusive), before 6.1.104 (exclusive)
linux

linux kernel · from 6.6.36 (inclusive), before 6.6.45 (exclusive)
linux

linux kernel · from 6.9.7 (inclusive), before 6.10 (exclusive)
linux

linux kernel · from 6.10 (inclusive), before 6.10.4 (exclusive)
linux

linux kernel · 6.11 · update rc1
linux

Linux · 03f625505e27f709390a86c9b78d3707f4c23df8 to before 7c03ab555eb1ba26c77fd7c25bdf44a0ac23edee, aa1f81fe3a059bc984b230b5352ab89d06aa3c7b to before 3ddefcb8f75e312535e2e7d5fef9932019ba60f2, 2f82f75f843445daa81e8b2a76774b1348033ce6 to before d06daf0ad645d9225a3ff6958dd82e1f3988fa64, 9126fd82e9edc7b4796f756e4b258d34f17e5e4a to before d7cc186d0973afce0e1237c37f7512c01981fb79, 88c67aeb14070bab61d3dd8be96c8b42ebcaf53a to before 3a5b68869dbe14f1157c6a24ac71923db060eeab, 88c67aeb14070bab61d3dd8be96c8b42ebcaf53a to before 2191a54f63225b548fd8346be3611c3219a24738, b4382b854975ae96fbfcc83a1d79b5c063c1aaa8, 5.10.221 to before 5.10.224, 5.15.162 to before 5.15.165, 6.1.96 to before 6.1.104, 6.6.36 to before 6.6.45, 6.9.7 to before 6.10
Linux

Linux · 6.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/sched/act_ct.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.