CVE-2024-43858: linux kernel from 2.6.12 (inclusive), before 4.19.320 (exclusive), from 4.20 (inclusive), before 5.4.282 (exclusive)…

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.320 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.282 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.224 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.165 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.103 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.44 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.3 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 55b732c8b09b41148eaab2fa8e31b0af47671e00, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9b3a4345957f5372041bc4f59de322f62653e862, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 538a27c8048f081a5ddd286f886eb986fbbc7f80, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 63f7fdf733add82f126ea00e2e48f6eba15ac4b9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8d8f9a477de0d7962342eedf2a599215b7c63d28, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ff14eadc278663cac69d57d3ca7fb2f394e1f8a7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6aa6892a90a5a7fabffe5692ab9f06a7a46c6e42, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f73f969b2eb39ad8056f6c7f3a295fa2f85e313a
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_imap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.