CVE-2024-57901: linux kernel from 4.19.320 (inclusive), before 4.20 (exclusive), from 5.4.282 (inclusive), before 5.4.289 (exclusive)…

Affected technology

linux kernel · from 4.19.320 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.282 (inclusive), before 5.4.289 (exclusive)
linux

linux kernel · from 5.10.224 (inclusive), before 5.10.233 (exclusive)
linux

linux kernel · from 5.15.165 (inclusive), before 5.15.176 (exclusive)
linux

linux kernel · from 6.1.103 (inclusive), before 6.1.124 (exclusive)
linux

linux kernel · from 6.6.44 (inclusive), before 6.6.70 (exclusive)
linux

linux kernel · from 6.10.3 (inclusive), before 6.12.9 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

Linux · c77064e76c768fb101ea5ff92dc771142fc9d8fd to before 560cbdd26b510626f3f4f27d34c44dfd3dd3499d, 83e2dfadcb6258fe3111c8a8ec9cf34465e55e64 to before 0d3fa6c3c9ca7aa255696150f5b759ac4a4974e1, d0a1f9aa70f0d8a05b6320e8a3f3b83adab8dac3 to before de4f8d477c67ec1d7c28f3486c3e47d147d90a01, 5839f59ff1dd4e35b9e767927931a039484839e1 to before 5d336714db324bef84490c75dcc48b387ef0346e, 5a041d25b67042cbe06a0fb292ee22fd1147e65c to before a693b87692b4d7c50f4fc08a996678d60534a9da, 79eecf631c14e7f4057186570ac20e2cfac3802e to before cd8488fdc7116f6da277515647b167859d4f72b1, 79eecf631c14e7f4057186570ac20e2cfac3802e to before f91a5b8089389eb408501af2762f168c3aaa7b79, 3dfd84aa72fa7329ed4a257c8f40e0c9aff4dc8f, 66f23a7b5174b5d3e7111fd2d0d5a4f3faaa12e5, 5.4.282 to before 5.4.289, 5.10.224 to before 5.10.233, 5.15.165 to before 5.15.176, 6.1.103 to before 6.1.124, 6.6.44 to before 6.6.70, 4.19.320 to before 4.20, 6.10.3 to before 6.11
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: include/linux/if_vlan.h, net/packet/af_packet.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.