CVE-2024-49902: linux kernel before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive), from 5.16 (inclusive)…

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d76b9a4c283c7535ae7c7c9b14984e75402951e1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 35b91f15f44ce3c01eba058ccb864bb04743e792, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2451e5917c56be45d4add786e2a059dd9c2c37c4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 25d2a3ff02f22e215ce53355619df10cc5faa7ab, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 058aa89b3318be3d66a103ba7c68d717561e1dc6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7fff9a9f866e99931cf6fa260288e55d01626582, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cb0eb10558802764f07de1dc439c4609e27cb4f0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4a7bf6a01fb441009a6698179a739957efd88e38, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d64ff0d2306713ff084d4b09f84ed1a8c75ecc32
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_dmap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.