CVE-2024-53140: linux kernel from 4.4.38 (inclusive), before 4.5 (exclusive), from 4.8.14 (inclusive), before 4.9 (exclusive), from…

Affected technology

linux kernel · from 4.4.38 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.8.14 (inclusive), before 4.9 (exclusive)
linux

linux kernel · from 4.9 (inclusive), before 6.1.119 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.63 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.10 (exclusive)
linux

Linux · ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 114a61d8d94ae3a43b82446cf737fd757021b834, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 598c956b62699c3753929602560d8df322e60559, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 6e3f2c512d2b7dbd247485b1dd9e43e4210a18f4, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before d2fab3d66cc16cfb9e3ea1772abe6b79b71fa603, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 4e87a52133284afbd40fb522dbf96e258af52a98, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before bbc769d2fa1b8b368c5fbe013b5b096afa3c05ca, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 176c41b3ca9281a9736b67c6121b03dbf0c8c08f, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 1904fb9ebf911441f90a68e96b22aa73e4410505, baaf0c65bc8ea9c7a404b09bc8cc3b8a1e4f18df, 25d9b4bb64ea964769087fc5ae09aee9c838d759, 4.4.38 to before 4.5, 4.8.14 to before 4.9
Linux

Linux · 4.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/netlink/af_netlink.c, net/netlink/af_netlink.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

But also means that the user can close the socket without getting to the end of the dump. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.