CVE-2024-49884: debian linux 11.0; +8 more affected products

Affected technology

debian linux · 11.0
debian

linux kernel · from 3.18 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 393a46f60ea4f249dc9d496d4eb2d542f5e11ade, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 448100a29395b0c8b4c42967155849fe0fbe808f, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before e52f933598b781d291b9297e39c463536da0e185, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before cafcc1bd62934547c76abf46c6d0d54f135006fe, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before a5401d4c3e2a3d25643c567d26e6de327774a2c9, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 8fe117790b37c84c651e2bad9efc0e7fda73c0e3, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 5d949ea75bb529ea6342e83465938a3b0ac51238, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 915ac3630488af0ca194dc63b86d99802b4f6e18, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before c26ab35702f8cd0cdc78f96aa5856bfb77be798f
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ext4/extents.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.