CVE-2024-50063: debian linux 11.0; +5 more affected products

Affected technology

debian linux · 11.0
debian

linux kernel · from 5.5 (inclusive), before 6.1.135 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

Linux · f1b9509c2fb0ef4db8d22dac9aef8e856a5d81f6 to before d9a807fb7cbfad4328824186e2e4bee28f72169b, f1b9509c2fb0ef4db8d22dac9aef8e856a5d81f6 to before 5d5e3b4cbe8ee16b7bf96fd73a421c92a9da3ca1, f1b9509c2fb0ef4db8d22dac9aef8e856a5d81f6 to before 88c2a10e6c176c2860cd0659f4c0e9d20b3f64d1, f1b9509c2fb0ef4db8d22dac9aef8e856a5d81f6 to before 28ead3eaabc16ecc907cfb71876da028080f6356
Linux

Linux · 5.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: tail
File: include/linux/bpf.h, kernel/bpf/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.