CVE-2024-57902: linux kernel from 4.19.320 (inclusive), before 4.20 (exclusive), from 5.4.282 (inclusive), before 5.4.289 (exclusive)…

Affected technology

linux kernel · from 4.19.320 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.282 (inclusive), before 5.4.289 (exclusive)
linux

linux kernel · from 5.10.224 (inclusive), before 5.10.233 (exclusive)
linux

linux kernel · from 5.15.165 (inclusive), before 5.15.176 (exclusive)
linux

linux kernel · from 6.1.103 (inclusive), before 6.1.124 (exclusive)
linux

linux kernel · from 6.6.44 (inclusive), before 6.6.70 (exclusive)
linux

linux kernel · from 6.10.3 (inclusive), before 6.12.9 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

Linux · c77064e76c768fb101ea5ff92dc771142fc9d8fd to before 66ffb0cf2125dcf9e902eede4a43653a24fd9cb2, 83e2dfadcb6258fe3111c8a8ec9cf34465e55e64 to before fa57f07ba0622c8692f40e1300adca59277b0044, d0a1f9aa70f0d8a05b6320e8a3f3b83adab8dac3 to before 65c67049e9ed481f6b52264b39618b8c6dfb1d3e, 5839f59ff1dd4e35b9e767927931a039484839e1 to before d91b4a9baa018a001d5c884e236c0cfd31f9f4a1, 5a041d25b67042cbe06a0fb292ee22fd1147e65c to before 7aa78d0d8546d8ce5a764add3f55d72e707c18f1, 79eecf631c14e7f4057186570ac20e2cfac3802e to before b65292a548d847099a4fe0fff53122a06e798e25, 79eecf631c14e7f4057186570ac20e2cfac3802e to before 77ee7a6d16b6ec07b5c3ae2b6b60a24c1afbed09, 3dfd84aa72fa7329ed4a257c8f40e0c9aff4dc8f, 66f23a7b5174b5d3e7111fd2d0d5a4f3faaa12e5, 5.4.282 to before 5.4.289, 5.10.224 to before 5.10.233, 5.15.165 to before 5.15.176, 6.1.103 to before 6.1.124, 6.6.44 to before 6.6.70, 4.19.320 to before 4.20, 6.10.3 to before 6.11
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/packet/af_packet.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.