CVE-2024-47709: linux kernel 4.19.322, 5.10.226, 5.15.167; +5 more affected products

Affected technology

linux kernel · from 5.4.284 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 6.1.110 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.51 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.10.10 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

linux kernel · 4.19.322
linux

linux kernel · 5.10.226
linux

linux kernel · 5.15.167
linux

Linux · 5c680022c4e28ba18ea500f3e29f0428271afa92 to before f5059fae5ed518fc56494ce5bdd4f5360de4b3bc, 33ed4ba73caae39f34ab874ba79138badc2c65dd to before a833da8eec20b51af39643faa7067b25c8b20f3e, aec92dbebdbec7567d9f56d7c9296a572b8fd849 to before 5cc00913c1fdcab861c4e65fa20d1f1e1bbbf977, 10bfacbd5e8d821011d857bee73310457c9c989a to before 9550baada4c8ef8cebefccc746384842820b4dff, 3b39dc2901aa7a679a5ca981a3de9f8d5658afe8 to before 7a145d6ec2124bdb94bd6fc436b342ff6ddf2b70, 4377b79323df62eb5d310354f19b4d130ff58d50 to before c3d941cc734e0c8dc486c062926d5249070af5e4, abb0a615569ec008e8a93d9f3ab2d5b418ea94d4 to before 770b463264426cc3c167b1d44efa85f6a526ce5b, 76fe372ccb81b0c89b6cd2fec26e2f38c958be85 to before b02ed2f01240b226570b4a19b5041d61f5125784, 76fe372ccb81b0c89b6cd2fec26e2f38c958be85 to before 94b0818fa63555a65f6ba107080659ea6bcca63e, 4.19.322 to before 4.19.323, 5.4.284 to before 5.4.285, 5.10.226 to before 5.10.227, 5.15.167 to before 5.15.168, 6.1.110 to before 6.1.113, 6.6.51 to before 6.6.54, 6.10.10 to before 6.10.13
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/can/bcm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.