CVE-2024-50142: linux kernel from 2.6.12 (inclusive), before 4.19.323 (exclusive), from 4.20 (inclusive), before 5.4.285 (exclusive)…

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f31398570acf0f0804c644006f7bfa9067106b0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 401ad99a5ae7180dd9449eac104cb755f442e7f3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8df5cd51fd70c33aa1776e5cbcd82b0a86649d73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2d08a6c31c65f23db71a5385ee9cf9d8f9a67a71, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bce1afaa212ec380bf971614f70909a27882b862, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d9868180bd1e4cf37e7c5067362658971162366, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e68dd80ba498265d2266b12dc3459164f4ff0c4a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3f0ab59e6537c6a8f9e1b355b48f9c05a76e8563
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/xfrm/xfrm_user.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.