CVE-2024-49952: linux kernel from 4.3 (inclusive), before 4.19.323 (exclusive), from 4.20 (inclusive), before 5.4.285 (exclusive)…

Affected technology

linux kernel · from 4.3 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · d877f07112f1e5a247c6b585c971a93895c9f738 to before 50067d8b3f48e4cd4c9e817d3e9a5b5ff3507ca7, d877f07112f1e5a247c6b585c971a93895c9f738 to before c0add6ed2cf1c4733cd489efc61faeccd3433b41, d877f07112f1e5a247c6b585c971a93895c9f738 to before 531754952f5dfc4b141523088147071d6e6112c4, d877f07112f1e5a247c6b585c971a93895c9f738 to before 38e3fd0c4a2616052eb3c8f4e6f32d1ff47cd663, d877f07112f1e5a247c6b585c971a93895c9f738 to before b40b027a0c0cc1cb9471a13f9730bb2fff12a15b, d877f07112f1e5a247c6b585c971a93895c9f738 to before 4e3542f40f3a94efa59ea328e307c50601ed7065, d877f07112f1e5a247c6b585c971a93895c9f738 to before f839c5cd348201fec440d987cbca9b979bdb4fa7, d877f07112f1e5a247c6b585c971a93895c9f738 to before 752e1924604254f1708f3e3700283a86ebdd325d, d877f07112f1e5a247c6b585c971a93895c9f738 to before 92ceba94de6fb4cee2bf40b485979c342f44a492
Linux

Linux · 4.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/ipv4/netfilter/nf_dup_ipv4.c, net/ipv6/netfilter/nf_dup_ipv6.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.