CVE-2024-42306: linux kernel from 4.14.326 (inclusive), before 4.15 (exclusive), from 4.19.295 (inclusive), before 4.20 (exclusive)…

Affected technology

linux kernel · from 4.14.326 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.295 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.257 (inclusive), before 5.4.282 (exclusive)
linux

linux kernel · from 5.10.195 (inclusive), before 5.10.224 (exclusive)
linux

linux kernel · from 5.15.132 (inclusive), before 5.15.165 (exclusive)
linux

linux kernel · from 6.1.53 (inclusive), before 6.1.103 (exclusive)
linux

linux kernel · from 6.3 (inclusive), before 6.6.44 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.3 (exclusive)
linux

Linux · 7648ea9896b31aff38830d81188f5b7a1773e4a8 to before cae9e59cc41683408b70b9ab569f8654866ba914, 4ac54312f623c6d2ca30c36c1ef530c11f5aff64 to before 2199e157a465aaf98294d3932797ecd7fce942d5, 099bf90d7fc4622da9fd4727f6d318a0f12d10be to before 6a43e3c210df6c5f00570f4be49a897677dbcb64, 6ac8f2c8362afd2baa8e7b9c946597589e587d22 to before 271cab2ca00652bc984e269cf1208699a1e09cdd, 1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d to before 57053b3bcf3403b80db6f65aba284d7dfe7326af, 1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d to before 8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65, 1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d to before a90d4471146de21745980cba51ce88e7926bcc4f, f862a9049c3f6e73a5504a1ac10ffd5bc253ab55, 4622cc1b6d86013e01c56b60b092b5e4726c8e52, 5.4.257 to before 5.4.282, 5.10.195 to before 5.10.224, 5.15.132 to before 5.15.165, 6.1.53 to before 6.1.103, 4.14.326 to before 4.15, 4.19.295 to before 4.20
Linux

Linux · 6.3
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/udf/balloc.c, fs/udf/super.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.