CVE-2024-44987: linux kernel from 2.6.32 (inclusive), before 4.19.321 (exclusive), from 4.20 (inclusive), before 5.4.283 (exclusive)…

Affected technology

linux kernel · from 2.6.32 (inclusive), before 4.19.321 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.283 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.225 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.166 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.107 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.48 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.7 (exclusive)
linux

linux kernel · 6.11 · update rc1
linux

linux kernel · 6.11 · update rc2
linux

linux kernel · 6.11 · update rc3
linux

linux kernel · 6.11 · update rc4
linux

Linux · 0625491493d9000e4556bf566d205c28c8e7dc4e to before 571567e0277008459750f0728f246086b2659429, 0625491493d9000e4556bf566d205c28c8e7dc4e to before ce2f6cfab2c637d0bd9762104023a15d0ab7c0a8, 0625491493d9000e4556bf566d205c28c8e7dc4e to before cb5880a0de12c7f618d2bdd84e2d985f1e06ed7e, 0625491493d9000e4556bf566d205c28c8e7dc4e to before 24e93695b1239fbe4c31e224372be77f82dab69a, 0625491493d9000e4556bf566d205c28c8e7dc4e to before 9a3e55afa95ed4ac9eda112d4f918af645d72f25, 0625491493d9000e4556bf566d205c28c8e7dc4e to before af1dde074ee2ed7dd5bdca4e7e8ba17f44e7b011, 0625491493d9000e4556bf566d205c28c8e7dc4e to before e44bd76dd072756e674f45c5be00153f4ded68b2, 0625491493d9000e4556bf566d205c28c8e7dc4e to before faa389b2fbaaec7fd27a390b4896139f9da662e3
Linux

Linux · 2.6.32
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/ipv6/ip6_output.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.