CVE-2024-41029: nvmem: core: limit cell sysfs permissions to main attribute ones
In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: limit cell sysfs permissions to main attribute ones
The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvmeconfig::rootonly was set, the cell attribute would still provide read access to everybody.
Mask out permissions not available on the main attribute.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41029?
CVE-2024-41029 has a medium severity rating as it affects sysfs permissions in the Linux kernel.
How do I fix CVE-2024-41029?
To fix CVE-2024-41029, update to the patched version of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
Which versions of Linux are affected by CVE-2024-41029?
CVE-2024-41029 affects various versions of the Linux kernel prior to the patched releases.
Is CVE-2024-41029 a critical vulnerability?
No, CVE-2024-41029 is not classified as a critical vulnerability.
What components are impacted by CVE-2024-41029?
CVE-2024-41029 impacts the nvmem core in the Linux kernel related to sysfs permissions.