CVE-2024-43882: linux kernel before 4.19.320 (exclusive), from 4.20 (inclusive), before 5.4.282 (exclusive), from 5.5 (inclusive)…

Affected technology

linux kernel · before 4.19.320 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.282 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.224 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.165 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.106 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.47 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.6 (exclusive)
linux

linux kernel · 6.11 · update rc1
linux

linux kernel · 6.11 · update rc2
linux

linux kernel · 6.11 · update rc3
linux

Linux · 9167b0b9a0ab7907191523f5a0528e3b9c288e21 to before d5c3c7e26275a2d83b894d30f7582a42853a958f, 9167b0b9a0ab7907191523f5a0528e3b9c288e21 to before 368f6985d46657b8b466a421dddcacd4051f7ada, 9167b0b9a0ab7907191523f5a0528e3b9c288e21 to before 15469d46ba34559bfe7e3de6659115778c624759, 9167b0b9a0ab7907191523f5a0528e3b9c288e21 to before 9b424c5d4130d56312e2a3be17efb0928fec4d64, 9167b0b9a0ab7907191523f5a0528e3b9c288e21 to before f6cfc6bcfd5e1cf76115b6450516ea4c99897ae1, 9167b0b9a0ab7907191523f5a0528e3b9c288e21 to before d2a2a4714d80d09b0f8eb6438ab4224690b7121e, 9167b0b9a0ab7907191523f5a0528e3b9c288e21 to before 90dfbba89ad4f0d9c9744ecbb1adac4aa2ff4f3e, 9167b0b9a0ab7907191523f5a0528e3b9c288e21 to before f50733b45d865f91db90919f8311e2127ce5a0cb
Linux

Linux · 2.6.18
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/exec.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.