CVE-2024-46865: linux kernel 5.10.226, 5.15.167, 6.1.110 (+2 more affected versions); +2 more affected products

Affected technology

linux kernel · 5.10.226
linux

linux kernel · 5.15.167
linux

linux kernel · 6.1.110
linux

linux kernel · 6.6.51
linux

linux kernel · 6.10.10
linux

Linux · 231c235d2f7a66f018f172e26ffd47c363f244ef to before 392f6a97fcbecc64f0c00058b2db5bb0e4b8cc3e, 4494bccb52ffda22ce5a1163a776d970e6229e08 to before 16ff0895283058b0f96d4fe277aa25ee096f0ea8, d7567f098f54cb53ee3cee1c82e3d0ed9698b6b3 to before 5d537b8d900514509622ce92330b70d2e581d409, 1df42be305fe478ded1ee0c1d775f4ece713483b to before 7ae890ee19479eeeb87724cca8430b5cb3660c74, c46cd6aaca81040deaea3500ba75126963294bd9 to before aca06c617c83295f0caa486ad608fbef7bdc11e8, 7e4196935069947d8b70b09c1660b67b067e75cb to before 4c8002277167125078e6b9b90137bdf443ebaa08
Linux

Linux · 5.10.226 to before 5.10.227, 5.15.167 to before 5.15.168, 6.1.110 to before 6.1.111, 6.6.51 to before 6.6.52, 6.10.10 to before 6.10.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/ipv4/fou_core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.