In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: limit cell sysfs permissions to main attribute ones
The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvme_config::root_only was set, the cell attribute would still provide read access to everybody.
Mask out permissions not available on the main attribute.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-oracle | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub