CVE-2024-53165: linux kernel from 2.6.30 (inclusive), before 4.19.325 (exclusive), from 4.20 (inclusive), before 5.4.287 (exclusive)…

Affected technology

linux kernel · from 2.6.30 (inclusive), before 4.19.325 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 3c7c806b3eafd94ae0f77305a174d63b69ec187c, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 971b4893457788e0e123ea552f0bb126a5300e61, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before c3f4f4547fb291982f5ef56c048277c4d5ccc4e4, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before c43df7dae28fb9fce96ef088250c1e3c3a77c527, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before b8b84dcdf3ab1d414304819f824b10efba64132c, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 6ba6e19912570b2ad68298be0be1dc779014a303, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 588bdec1ff8b81517dbae0ae51c9df52c0b952d3, 2dcec7a988a1895540460a0bf5603bab63d5a3ed to before 63e72e551942642c48456a4134975136cdcb9b3c
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/sh/intc/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.4/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.