Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41024
HistoryJul 29, 2024 - 2:31 p.m.

CVE-2024-41024 misc: fastrpc: Restrict untrusted app to attach to privileged PD

2024-07-2914:31:41
Linux
github.com
2
linux kernel
vulnerability
fix
untrusted application
fastrpc
privileged pds

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Restrict untrusted app to attach to privileged PD

Untrusted application with access to only non-secure fastrpc device
node can attach to root_pd or static PDs if it can make the respective
init request. This can cause problems as the untrusted application
can send bad requests to root_pd or static PDs. Add changes to reject
attach to privileged PDs if the request is being made using non-secure
fastrpc device node.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial