CVE-2024-41029

nvmem: core: limit cell sysfs permissions to main attribute ones

published July 29, 2024

CVSS
—
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nvmem: core: limit cell sysfs permissions to main attribute ones

The cell sysfs attribute should not provide more access to the nvmem

data than the main attribute itself.

For example if nvme_config::root_only was set, the cell attribute

would still provide read access to everybody.

Mask out permissions not available on the main attribute.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00268 · 18.0th percentile
Published
2024-07-29T14:31Z
EPSS history
Timeline
  • 29 JUL 14:31Z
    nvmem: core: limit cell sysfs permissions to main attribute ones
    cvelistv5