CVE-2024-50164: linux kernel from 5.19 (inclusive), before 6.6.59 (exclusive), from 6.7 (inclusive), before 6.11.6 (exclusive), 6.12 ·…

Affected technology

linux kernel · from 5.19 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 97e6d7dab1ca4648821c790a2b7913d6d5d549db to before 43f4df339a4d375bedcad29a61ae6f0ee7a048f8, 97e6d7dab1ca4648821c790a2b7913d6d5d549db to before 48068ccaea957469f1adf78dfd2c1c9a7e18f0fe, 97e6d7dab1ca4648821c790a2b7913d6d5d549db to before 54bc31682660810af1bed7ca7a19f182df8d3df8, 97e6d7dab1ca4648821c790a2b7913d6d5d549db to before 8ea607330a39184f51737c6ae706db7fdca7628e, 6099a6c8a749a5c8d5f8b4c4342022a92072a02b, bfe25df63048edd4ceaf78a2fc755d5e2befc978, 717c39718dbc4f7ebcbb7b625fb11851cd9007fe, 5d0bba8232bf22ce13747cbfc8f696318ff01a50, 70674d11d14eeecad90be4b409a22b902112ba32, a08d942ecbf46e23a192093f6983cb1d779f4fa8, 5.15.45 to before 5.16, 5.17.13 to before 5.18, 5.18.2 to before 5.19
Linux

Linux · 5.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: kernel/bpf/verifier.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Helpers access to variable memory") set meta to NULL in order force the user can always initialize the passed buffer to the helper. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity and availability impact as high.