CVE-2024-49973: linux kernel from 5.4 (inclusive), before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive)…

Affected technology

linux kernel · from 5.4 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 64648ae8c97ec5a3165021627f5a1658ebe081ca, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 991e8b0bab669b7d06927c3e442b3352532e8581, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 21950321ad33d7613b1453f4c503d7b1871deb61, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before fe44b3bfbf0c74df5712f44458689d0eccccf47d, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 1c723d785adb711496bc64c24240f952f4faaabf, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 92bc8647b4d65f4d4bf8afdb206321c1bc55a486, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 585c048d15ed559f20cb94c8fa2f30077efa4fbc, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before ced8e8b8f40accfcce4a2bbd8b150aa76d5eff9a
Linux

Linux · 5.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/realtek/r8169_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.