In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: limit cell sysfs permissions to main attribute ones
The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvme_config::root_only was set, the cell attribute would still provide read access to everybody.
Mask out permissions not available on the main attribute.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-genericUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-lowlatency | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub