CVE-2024-56703: linux kernel from 4.15 (inclusive), before 6.1.128 (exclusive), from 6.2 (inclusive), before 6.6.75 (exclusive), from…

Affected technology

linux kernel · from 4.15 (inclusive), before 6.1.128 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.75 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · 66f5d6ce53e665477d2a33e8f539d4fa4ca81c83 to before d0ec61c9f3583b76aebdbb271f5c0d3fcccd48b2, 66f5d6ce53e665477d2a33e8f539d4fa4ca81c83 to before 52da02521ede55fb86546c3fffd9377b3261b91f, 66f5d6ce53e665477d2a33e8f539d4fa4ca81c83 to before 11edcd026012ac18acee0f1514db3ed1b160fc6f, 66f5d6ce53e665477d2a33e8f539d4fa4ca81c83 to before 34a949e7a0869dfa31a40416d2a56973fae1807b, 66f5d6ce53e665477d2a33e8f539d4fa4ca81c83 to before d9ccb18f83ea2bb654289b6ecf014fd267cc988b
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/ip6_fib.c, net/ipv6/route.c, tools/testing/selftests/net/Makefile, tools/testing/selftests/net/ipv6_route_update_soft_lockup.sh

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.