CVE-2024-47706: linux kernel from 4.12 (inclusive), before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive)…

Affected technology

linux kernel · from 4.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 36eca894832351feed9072d0f97eb06fc9482ca4 to before a9bdd5b36887d2bacb8bc777fd18317c99fc2587, 36eca894832351feed9072d0f97eb06fc9482ca4 to before bc2140534b2aae752e4f7cb4489642dbb5ec4777, 36eca894832351feed9072d0f97eb06fc9482ca4 to before e1277ae780cca4e69ef5468d4582dfd48f0b8320, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 8aa9de02a4be2e7006e636816ce19b0d667ceaa3, 36eca894832351feed9072d0f97eb06fc9482ca4 to before ddbdaad123254fb53e32480cb74a486a6868b1e0, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 7faed2896d78e48ec96229e73b30b0af6c00a9aa, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 880692ee233ba63808182705b3333403413b58f5, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 6d130db286ad0ea392c96ebb2551acf0d7308048, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 18ad4df091dd5d067d2faa8fce1180b79f7041a7
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: block/bfq-iosched.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.