CVE-2024-45016: linux kernel from 5.0 (inclusive), before 5.4.283 (exclusive), from 5.5 (inclusive), before 5.10.225 (exclusive), from…

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.283 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.225 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.166 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.107 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.48 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.7 (exclusive)
linux

linux kernel · 6.11 · update rc1
linux

linux kernel · 6.11 · update rc2
linux

linux kernel · 6.11 · update rc3
linux

linux kernel · 6.11 · update rc4
linux

Linux · 5845f706388a4cde0f6b80f9e5d33527e942b7d9 to before 759e3e8c4a6a6b4e52ebc4547123a457f0ce90d4, 5845f706388a4cde0f6b80f9e5d33527e942b7d9 to before c414000da1c2ea1ba9a5e5bb1a4ba774e51e202d, 5845f706388a4cde0f6b80f9e5d33527e942b7d9 to before 52d99a69f3d556c6426048c9d481b912205919d8, 5845f706388a4cde0f6b80f9e5d33527e942b7d9 to before 0486d31dd8198e22b63a4730244b38fffce6d469, 5845f706388a4cde0f6b80f9e5d33527e942b7d9 to before 577d6c0619467fe90f7e8e57e45cb5bd9d936014, 5845f706388a4cde0f6b80f9e5d33527e942b7d9 to before e5bb2988a310667abed66c7d3ffa28880cf0f883, 5845f706388a4cde0f6b80f9e5d33527e942b7d9 to before c07ff8592d57ed258afee5a5e04991a48dbaf382, a550a01b8af856f2684b0f79d552f5119eb5006c, 009510a90e230bb495f3fe25c7db956679263b07, 4de7d30668cb8b06330992e1cd336f91700a2ce7, d1dd2e15c85e890a1cc9bde5ba07ae63331e5c73, 0148fe458b5705e2fea7cb88294fed7e36066ca2, 3.16.66 to before 3.17, 4.9.163 to before 4.10, 4.14.106 to before 4.15, 4.19.28 to before 4.20, 4.20.15 to before 4.21
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/sched/sch_netem.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not state a further attacker outcome.