CVE-2024-50301: linux kernel from 3.13 (inclusive), before 4.19.324 (exclusive), from 4.20 (inclusive), before 5.4.286 (exclusive)…

Affected technology

linux kernel · from 3.13 (inclusive), before 4.19.324 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.286 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.230 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.172 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.117 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.61 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.8 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

Linux · b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before c3ce634ad953ce48c75c39bdfd8b711dd95f346f, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 4efb69a0e294ef201bcdf7ce3d6202cd0a545a5d, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 1e4332581cd4eed75aea77af6f66cdcdda8b49b9, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 199c20fb7499c79557a075dc24e9a7dae7d9f1ce, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before bbad2d5b6c99db468d8f88b6ba6a56ed409b4881, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 3e79ad156bedf2da0ab909a118d2cec6c9c22b79, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before e0a317ad68e4ea48a0158187238c5407e4fdec8b, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 4a74da044ec9ec8679e6beccc4306b936b62873f
Linux

Linux · 3.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: security/keys/keyring.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.