CVE-2024-49944: linux kernel from 2.6.30 (inclusive), before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive)…

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 89bbead9d897c77d0b566349c8643030ff2abeba, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 0e4e2e60556c6ed00e8450b720f106a268d23062, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before dd70c8a89ef99c3d53127fe19e51ef47c3f860fa, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before e7a8442195e8ebd97df467ce4742980ab57edcce, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 9230a59eda0878d7ecaa901d876aec76f57bd455, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before f032e1dac30b3376c7d6026fb01a8c403c47a80d, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 8beee4d8dee76b67c75dc91fd8185d91e845c160
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sctp/socket.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.