CVE-2024-24891

Information Leakage in kernel

CVSS 6 MEDIUMEPSS 0.2%CWE-200

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 abr 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program files https://gitee.Com/openeuler/kernel/blob/openEuler-1.0-LTS/drivers/staging/gmjstcm/tcm.C. This issue affects kernel: from 4.19.90-2109.1.0.0108 before 4.19.90-2403.4.0.0244.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Productos afectados

openEuler · kernel

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://gitee.com/openeuler/kernel/pulls/2810 https://gitee.com/src-openeuler/kernel/pulls/1320 https://gitee.com/src-openeuler/kernel/pulls/1321 https://gitee.com/src-openeuler/kernel/pulls/1322 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1358