In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: limit cell sysfs permissions to main attribute ones
The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvme_config::root_only was set, the cell attribute would still provide read access to everybody.
Mask out permissions not available on the main attribute.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-azureUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-48-lowlatency-64k | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub