CVE-2024-50299: linux kernel from 2.6.12 (inclusive), before 4.19.324 (exclusive), from 4.20 (inclusive), before 5.4.286 (exclusive)…

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.324 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.286 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.230 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.172 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.117 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.61 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.8 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 67b9a278b80f71ec62091ded97c6bcbea33b5ec3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9b5d42aeaf1a52f73b003a33da6deef7df34685f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40b283ba76665437bc2ac72079c51b57b25bff9e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a758aa6a773bb872196bcc3173171ef8996bddf0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bf9bff13225baf5f658577f7d985fc4933d79527, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d3fb3cc83cf313e4f87063ce0f3fea76b071567b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8820d2d6589f62ee5514793fff9b50c9f8101182, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0ead60804b64f5bd6999eec88e503c6a1a242d41
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sctp/sm_statefuns.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.