CVE-2024-46750: linux kernel before 4.19.322 (exclusive), from 4.20 (inclusive), before 5.4.284 (exclusive), from 5.5 (inclusive)…

Affected technology

linux kernel · before 4.19.322 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.284 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.226 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.167 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.110 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.51 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.10 (exclusive)
linux

Linux · 090a3c5322e900f468b3205b76d0837003ad57b2 to before 0790b89c7e911003b8c50ae50e3ac7645de1fae9, 090a3c5322e900f468b3205b76d0837003ad57b2 to before df77a678c33871a6e4ac5b54a71662f1d702335b, 090a3c5322e900f468b3205b76d0837003ad57b2 to before e2355d513b89a2cb511b4ded0deb426cdb01acd0, 090a3c5322e900f468b3205b76d0837003ad57b2 to before 04e85a3285b0e5c5af6fd2c0fd6e95ffecc01945, 090a3c5322e900f468b3205b76d0837003ad57b2 to before 7253b4fed46471cc247c6cacefac890a8472c083, 090a3c5322e900f468b3205b76d0837003ad57b2 to before 78c6e39fef5c428960aff742149bba302dd46f5a, 090a3c5322e900f468b3205b76d0837003ad57b2 to before 81c68e218ab883dfa368460a59b674084c0240da, 090a3c5322e900f468b3205b76d0837003ad57b2 to before a4e772898f8bf2e7e1cf661a12c60a5612c4afab
Linux

Linux · 3.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/pci/pci.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.