CVE-2024-50045: linux kernel from 4.11 (inclusive), before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive)…

Affected technology

linux kernel · from 4.11 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before f07131239a76cc10d5e82c19d91f53cb55727297, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 75dfcb758015c97e1accd6340691fca67d363bed, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before cce8419b8168f6e7eb637103a47f916f3de8bc81, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 95c0cff5a1a5d28bf623b92eb5d1a8f56ed30803, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 78ed917133b118661e1fe62d4a85d5d428ee9568, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 3453f5839420bfbb85c86c61e49f49ffd0f041c4, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 915717e0bb9837cc5c101bc545af487bd787239e, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before f9ff7665cd128012868098bbd07e28993e314fdb
Linux

Linux · 4.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/bridge/br_netfilter_hooks.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.