CVE-2024-56719: linux kernel from 5.15.171 (inclusive), before 5.16 (exclusive), from 6.1.116 (inclusive), before 6.2 (exclusive)…

Affected technology

linux kernel · from 5.15.171 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.116 (inclusive), before 6.2 (exclusive)
linux

linux kernel · from 6.6.60 (inclusive), before 6.6.68 (exclusive)
linux

linux kernel · from 6.11.7 (inclusive), before 6.12.7 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

Linux · ece593fc9c00741b682869d3f3dc584d37b7c9df to before 05968b6dd0ffc65d7386608b11a11fb4fdfc9f36, a3ff23f7c3f0e13f718900803e090fd3997d6bc9 to before 6abcdc9a73274052a9e96a1926994ecf9aedad82, 07c9c26e37542486e34d767505e842f48f29c3f6 to before db3667c9bbfbbf5de98e6c9542f7e03fb5243286, 66600fac7a984dea4ae095411f644770b2561ede to before 9d5dd7ccea1b46a9a7c6b3c2b9e5ed8864e185e2, 66600fac7a984dea4ae095411f644770b2561ede to before 4c49f38e20a57f8abaebdf95b369295b153d1f8e, 58d23d835eb498336716cca55b5714191a309286, 5.15.171 to before 5.15.209, 6.1.116 to before 6.1.167, 6.6.60 to before 6.6.68, 6.11.7 to before 6.12
Linux

Linux · 6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/stmicro/stmmac/stmmac_main.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.