CVE-2024-56549: linux kernel from 5.19 (inclusive), before 6.11.11 (exclusive), from 6.12 (inclusive), before 6.12.2 (exclusive); +1…

Affected technology

linux kernel · from 5.19 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · c8383054506c77b814489c09877b5db83fd4abf2 to before d6bba3ece960129a553d4b16f1b00c884dc0993a, c8383054506c77b814489c09877b5db83fd4abf2 to before 785408bbafcfa24c9fc5b251f03fd0780ce182bd, c8383054506c77b814489c09877b5db83fd4abf2 to before f98770440c9bc468e2fd878212ec9526dbe08293, c8383054506c77b814489c09877b5db83fd4abf2 to before 9582c7664103c9043e80a78f5c382aa6bdd67418, c8383054506c77b814489c09877b5db83fd4abf2 to before 31ad74b20227ce6b40910ff78b1c604e42975cf1
Linux

Linux · 5.19
Linux

Component: Not specified by the source
File: fs/cachefiles/interface.c, fs/cachefiles/ondemand.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.