CVE-2024-53042: linux kernel from 5.10.227 (inclusive), before 5.10.229 (exclusive), from 5.15.168 (inclusive), before 5.15.171…

Affected technology

linux kernel · from 5.10.227 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.15.168 (inclusive), before 5.15.171 (exclusive)
linux

linux kernel · from 5.18 (inclusive), before 6.1.116 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.60 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.7 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

Linux · ab6c9463b137163ba53fc050bf2c72bed2c997b8 to before e2742758c9c85c84e077ede5f916479f724e11c2, 760852df570747e500a9632d34cbbf4faef30855 to before 5edcb3fdb12c3d46a6e79eeeec27d925b80fc168, db53cd3d88dc328dea2e968c9c8d3b4294a8a674 to before 72c0f482e39c87317ebf67661e28c8d86c93e870, db53cd3d88dc328dea2e968c9c8d3b4294a8a674 to before 699b48fc31727792edf2cab3829586ae6ba649e2, db53cd3d88dc328dea2e968c9c8d3b4294a8a674 to before 6dfaa458fe923211c766238a224e0a3c0522935c, db53cd3d88dc328dea2e968c9c8d3b4294a8a674 to before ad4a3ca6a8e886f6491910a3ae5d53595e40597d, 5.10.227 to before 5.10.229, 5.15.168 to before 5.15.171
Linux

Linux · 5.18
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: is
File: include/net/ip_tunnels.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.