Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41029
HistoryJul 29, 2024 - 2:31 p.m.

CVE-2024-41029 nvmem: core: limit cell sysfs permissions to main attribute ones

2024-07-2914:31:45
Linux
github.com
2
linux kernel
vulnerability
nvmem
permissions

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

nvmem: core: limit cell sysfs permissions to main attribute ones

The cell sysfs attribute should not provide more access to the nvmem
data than the main attribute itself.
For example if nvme_config::root_only was set, the cell attribute
would still provide read access to everybody.

Mask out permissions not available on the main attribute.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-41029