CVE-2024-56702: linux kernel from 6.2 (inclusive), before 6.11.11 (exclusive), from 6.12 (inclusive), before 6.12.2 (exclusive); +1…

Affected technology

linux kernel · from 6.2 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · 3f00c52393445ed49aadc1a567aa502c6333b1a1 to before 41168ed90f98e380c483ead0683bbdebe0217835, 3f00c52393445ed49aadc1a567aa502c6333b1a1 to before c9b91d2d54175f781ad2c361cb2ac2c0e29b14b6, 3f00c52393445ed49aadc1a567aa502c6333b1a1 to before 3634d4a310820567fc634bf8f1ee2b91378773e8, 3f00c52393445ed49aadc1a567aa502c6333b1a1 to before cb4158ce8ec8a5bb528cc1693356a5eb8058094d
Linux

Linux · 6.2
Linux

Component: Not specified by the source
File: include/linux/bpf.h, kernel/bpf/btf.c, kernel/bpf/verifier.c, tools/testing/selftests/bpf/progs/test_tp_btf_nullable.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.