CVE-2024-57986: linux kernel from 5.0 (inclusive), before 5.4.291 (exclusive), from 5.5 (inclusive), before 5.10.235 (exclusive), from…

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.76 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

Linux · 5a4abb36f312cf83206b1b7d1308ba47cba0b3cc to before 3a002e4029230d9a6be89f869b2328b258612f5c, 5a4abb36f312cf83206b1b7d1308ba47cba0b3cc to before 05dd7d10675b540b8b7b31035c0a8abb6e6f3b88, 5a4abb36f312cf83206b1b7d1308ba47cba0b3cc to before a32ea3f982b389ea43a41ce77b6fb70d74006d9b, 5a4abb36f312cf83206b1b7d1308ba47cba0b3cc to before bebf542e8d7c44a18a95f306b1b5dc160c823506, 5a4abb36f312cf83206b1b7d1308ba47cba0b3cc to before ed3d3883476423f337aac0f22c521819b3f1e970, 5a4abb36f312cf83206b1b7d1308ba47cba0b3cc to before ebaeca33d32c8bdb705a8c88267737a456f354b1, 5a4abb36f312cf83206b1b7d1308ba47cba0b3cc to before a5498f1f864ea26f4c613c77f54409c776a95a90, 5a4abb36f312cf83206b1b7d1308ba47cba0b3cc to before 64f2657b579343cf923aa933f08074e6258eb07b
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: starts
File: drivers/hid/hid-core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.