CVE-2024-42304: linux kernel from 4.9.187 (inclusive), before 4.10 (exclusive), from 4.14.135 (inclusive), before 4.15 (exclusive)…

Affected technology

linux kernel · from 4.9.187 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.135 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.62 (inclusive), before 4.19.320 (exclusive)
linux

linux kernel · from 5.1.21 (inclusive), before 5.2 (exclusive)
linux

linux kernel · from 5.2.4 (inclusive), before 5.4.282 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.224 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.165 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.103 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.44 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.3 (exclusive)
linux

Linux · 3a17ca864baffc0c6f6e8aad525aa4365775a193 to before d81d7e347d1f1f48a5634607d39eb90c161c8afe, 4e19d6b65fb4fc42e352ce9883649e049da14743 to before e02f9941e8c011aa3eafa799def6a134ce06bcfa, 4e19d6b65fb4fc42e352ce9883649e049da14743 to before de2a011a13a46468a6e8259db58b1b62071fe136, 4e19d6b65fb4fc42e352ce9883649e049da14743 to before 9771e3d8365ae1dd5e8846a204cb9af14e3e656a, 4e19d6b65fb4fc42e352ce9883649e049da14743 to before b609753cbbd38f8c0affd4956c0af178348523ac, 4e19d6b65fb4fc42e352ce9883649e049da14743 to before c3893d9de8ee153baac56d127d844103488133b5, 4e19d6b65fb4fc42e352ce9883649e049da14743 to before 299bc6ffa57e04e74c6cce866d6c0741fb4897a1, 4e19d6b65fb4fc42e352ce9883649e049da14743 to before f9ca51596bbfd0f9c386dd1c613c394c78d9e5e6, 3f0307b0d2d8b333a6964fc4c820dc86896fd1cf, 514631c2225c1fd556c799cc1893fb27b0f48f00, 7f1f86276515f6816a98f6ca3ef99c827d54642f, 5021b7a5bdd6bb859eb648c3da71cdd6aae1d133, 4.19.62 to before 4.19.320, 4.9.187 to before 4.10, 4.14.135 to before 4.15, 5.1.21 to before 5.2, 5.2.4 to before 5.3
Linux

Linux · 5.3
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/ext4/namei.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.