CVE-2024-41029

nvmem: core: limit cell sysfs permissions to main attribute ones

Description

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: limit cell sysfs permissions to main attribute ones The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvme_config::root_only was set, the cell attribute would still provide read access to everybody. Mask out permissions not available on the main attribute.

N/A

CVSS

Severity:

EPSS 0.08%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/aa066afaaac32caf2160d58d4e3010ee04421c62
https://git.kernel.org/stable/c/6bef98bafd82903a8d461463f9594f19f1fd6a85

Frequently Asked Questions

What is the severity of CVE-2024-41029?: CVE-2024-41029 has not yet been assigned a CVSS score.
How to fix CVE-2024-41029?: To fix CVE-2024-41029, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-41029 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-41029 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-41029?: CVE-2024-41029 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.