CVE-2024-1048
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
4.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.3%
A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.
Affected configurations
References
www.openwall.com/lists/oss-security/2024/02/06/3
access.redhat.com/errata/RHSA-2024:2456
access.redhat.com/errata/RHSA-2024:3184
access.redhat.com/security/cve/CVE-2024-1048
bugzilla.redhat.com/show_bug.cgi?id=2256827
lists.fedoraproject.org/archives/list/[email protected]/message/XRZQCVZ3XOASVFT6XLO7F2ZXOLOHIJZQ/
lists.fedoraproject.org/archives/list/[email protected]/message/YSJAEGRR3XHMBBBKYOVMII4P34IXEYPE/
security.netapp.com/advisory/ntap-20240223-0007/
www.openwall.com/lists/oss-security/2024/02/06/3
Related
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
4.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.3%