CVE-2024-47696: linux kernel from 4.19.320 (inclusive), before 5.4 (exclusive), from 5.4.282 (inclusive), before 5.10 (exclusive)…

Affected technology

linux kernel · from 4.19.320 (inclusive), before 5.4 (exclusive)
linux

linux kernel · from 5.4.282 (inclusive), before 5.10 (exclusive)
linux

linux kernel · from 5.10.224 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.165 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.103 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.44 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.10.3 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · d91d253c87fd1efece521ff2612078a35af673c6 to before da2708a19f45b4a7278adf523837c8db21d1e2b5, 7f25f296fc9bd0435be14e89bf657cd615a23574 to before 29b3bbd912b8db86df7a3c180b910ccb621f5635, 94ee7ff99b87435ec63211f632918dc7f44dac79 to before 2efe8da2ddbf873385b4bc55366d09350b408df6, 557d035fe88d78dd51664f4dc0e1896c04c97cf6 to before da0392698c62397c19deb1b9e9bdf2fbb5a9420e, dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 to before a64f30db12bdc937c5108158d98c8eab1925c548, ff5bbbdee08287d75d72e65b72a2b76d9637892a to before 8b7df76356d098f85f3bd2c7cf6fb43f531893d7, ee39384ee787e86e9db4efb843818ef0ea9cb8ae to before c8b18a75282cfd27822a8cc3c1f005c1ac8d1a58, aee2424246f9f1dadc33faa78990c1e2eb7826e4 to before a09dc967b3c58899e259c0aea092f421d22a0b04, aee2424246f9f1dadc33faa78990c1e2eb7826e4 to before 86dfdd8288907f03c18b7fb462e0e232c4f98d89, 4.19.320 to before 4.19.323, 5.4.282 to before 5.4.285, 5.10.224 to before 5.10.227, 5.15.165 to before 5.15.168, 6.1.103 to before 6.1.113, 6.6.44 to before 6.6.54, 6.10.3 to before 6.10.13
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: flush_workqueue, alloc_ordered_workqueue
File: drivers/infiniband/core/iwcm.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.