CVE-2024-57996: linux kernel from 2.6.12 (inclusive), before 6.1.129 (exclusive), from 6.2 (inclusive), before 6.6.76 (exclusive)…

Affected technology

linux kernel · from 2.6.12 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.76 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e12f6013d0a69660e8b99bfe381b9546ae667328, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1e6d9d87626cf89eeffb4d943db12cb5b10bf961, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b562b7f9231432da40d12e19786c1bd7df653a7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 35d0137305ae2f97260a9047f445bd4434bd6cc7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 833e9a1c27b82024db7ff5038a51651f48f05e5e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d8947f2153ee9c5ab4cb17861a11cc45f30e8c4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7fefc294204f10a3405f175f4ac2be16d63f135e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 10685681bafce6febb39770f3387621bf5d67d0b
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: net/sched/sch_sfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.