CVE-2024-42312: linux kernel from 4.9.187 (inclusive), before 4.10 (exclusive), from 4.14.135 (inclusive), before 4.15 (exclusive)…

Affected technology

linux kernel · from 4.9.187 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.135 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.61 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.1.20 (inclusive), before 5.2 (exclusive)
linux

linux kernel · from 5.2.3 (inclusive), before 5.10.224 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.165 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.104 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.45 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.3 (exclusive)
linux

Linux · 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to before b2591c89a6e2858796111138c38fcb6851aa1955, 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to before 34a86adea1f2b3c3f9d864c8cce09dca644601ab, 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to before 1deae34db9f4f8e0e03f891be2e2e15c15c8ac05, 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to before ffde3af4b29bf97d62d82e1d45275587e10a991a, 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to before c7e2f43d182f5dde473389dbb39f16c9f0d64536, 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to before 98ca62ba9e2be5863c7d069f84f7166b45a5b2f4, e83234d7ef237931148b4b17834dadf57eb46c12, 2cbf2af144f0cd08a3361c6299b2e6086b7d21d9, 2c7b50c7b1d036f71acd9a917a8cb0f9b6e43dab, 7eb45a94c279dd5af4cafaa738ae93737517eef4, 14cc90952cef94bfa89a6b4a2f55fd9a70f50a16, 4.9.187 to before 4.10, 4.14.135 to before 4.15, 4.19.61 to before 4.20, 5.1.20 to before 5.2, 5.2.3 to before 5.3
Linux

Linux · 5.3
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/proc/proc_sysctl.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.