CVE-2024-50150: linux kernel from 4.19 (inclusive), before 4.19.323 (exclusive), from 4.20 (inclusive), before 5.4.285 (exclusive)…

Affected technology

linux kernel · from 4.19 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 2b0b33e8a58388fa9078f0fbe9af1900e6b08879, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 2c15c4133d00f5da632fce60ed013fc31aa9aa58, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 6af43ec3bf40f8b428d9134ffa7a291aecd60da8, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 87474406056891e4fdea0794e1f632b21b3dfa27, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before bee1b68cb8bcee4fd3a8bde3a4886e0b1375dc4d, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 1ded6b12499e6dee9b0e1ceac633be36538f6fc2, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 68a7c7fe322546be1464174c8d85874b8161deda, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before befab3a278c59db0cc88c8799638064f6d3fd6f8
Linux

Linux · 4.19
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/usb/typec/class.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.