In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: limit cell sysfs permissions to main attribute ones
The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvme_config::root_only was set, the cell attribute would still provide read access to everybody.
Mask out permissions not available on the main attribute.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1016-azure | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub