CVE-2024-49982: linux kernel 4.19.311, 5.4.273; +7 more affected products

Affected technology

linux kernel · from 5.10.214 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.153 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.83 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.23 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7.11 (inclusive), before 6.8.2 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 4.19.311
linux

linux kernel · 5.4.273
linux

linux kernel · 6.12 · update rc1
linux

Linux · ad80c34944d7175fa1f5c7a55066020002921a99 to before 12f7b89dd72b25da4eeaa22097877963cad6418e, 1a54aa506b3b2f31496731039e49778f54eee881 to before a786265aecf39015418e4f930cc1c14603a01490, faf0b4c5e00bb680e8e43ac936df24d3f48c8e65 to before f63461af2c1a86af4217910e47a5c46e3372e645, 7dd09fa80b0765ce68bfae92f4e2f395ccf0fba4 to before 07b418d50ccbbca7e5d87a3a0d41d436cefebf79, 74ca3ef68d2f449bc848c0a814cefc487bf755fa to before bc2cbf7525ac288e07d465f5a1d8cb8fb9599254, eb48680b0255a9e8a9bdc93d6a55b11c31262e62 to before acc5103a0a8c200a52af7d732c36a8477436a3d3, f98364e926626c678fb4b9004b75cacf92ff0662 to before 89d9a69ae0c667e4d9d028028e2dcc837bae626f, f98364e926626c678fb4b9004b75cacf92ff0662 to before 8253a60c89ec35c8f36fb2cc08cdf854c7a3eb58, f98364e926626c678fb4b9004b75cacf92ff0662 to before 6d6e54fc71ad1ab0a87047fd9c211e75d86084a3, 079cba4f4e307c69878226fdf5228c20aa1c969c, a16fbb80064634b254520a46395e36b87ca4731e, 4.19.311 to before 4.19.323, 5.4.273 to before 5.4.285, 5.10.214 to before 5.10.227, 5.15.153 to before 5.15.168, 6.1.83 to before 6.1.113, 6.6.23 to before 6.6.55, 6.7.11 to before 6.8, 6.8.2 to before 6.9
Linux

Linux · 6.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/block/aoe/aoecmd.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.