CVE-2024-56681: linux kernel from 4.11 (inclusive), before 4.19.325 (exclusive), from 4.20 (inclusive), before 5.4.287 (exclusive)…

Affected technology

linux kernel · from 4.11 (inclusive), before 4.19.325 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 8f1a9a960b1107bd0e0ec3736055f5ed0e717edf, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 75e1e38e5d80d6d9011b7322698ffba3dd3db30a, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 28f8ffa945f7d7150463e15097ea73b19529d6f5, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 4ea3e3b761e371102bb1486778e2f8dbc9e37413, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 05f0a3f5477ecaa1cf46448504afe9e7c2e96fcc, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ae5253313e0ea5f00c06176074592b7f493c8546, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ee36db8e8203420e6d5c42eb9428920c2fc36532, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before bba9e38c5ad41d0a88b22a59e5b6dd3e31825118, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 19630cf57233e845b6ac57c9c969a4888925467b
Linux

Linux · 4.11
Linux

Component: Not specified by the source
Function: The
File: drivers/crypto/bcm/cipher.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.