CVE-2024-56742: linux kernel from 5.18 (inclusive), before 6.11.11 (exclusive), from 6.12 (inclusive), before 6.12.2 (exclusive); +1…

Affected technology

linux kernel · from 5.18 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before 465e06ffbb681f6fe34ca3aeba4b609677c3d4c1, 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before 769fe4ce444b646b0bf6ac308de80686c730c7df, 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before c44f1b2ddfa81c8d7f8e9b6bc76c427bc00e69d5, 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before 22e87bf3f77c18f5982c19ffe2732ef0c7a25f16
Linux

Linux · 5.18
Linux

Component: Not specified by the source
File: drivers/vfio/pci/mlx5/cmd.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 3.3/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.