CVE-2024-24891

Information Leakage in kernel

CVSS 6 MEDIUMEPSS 0.2%CWE-200

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 abr 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program files https://gitee.Com/openeuler/kernel/blob/openEuler-1.0-LTS/drivers/staging/gmjstcm/tcm.C. This issue affects kernel: from 4.19.90-2109.1.0.0108 before 4.19.90-2403.4.0.0244.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Produtos afetados

openEuler · kernel

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://gitee.com/openeuler/kernel/pulls/2810 https://gitee.com/src-openeuler/kernel/pulls/1320 https://gitee.com/src-openeuler/kernel/pulls/1321 https://gitee.com/src-openeuler/kernel/pulls/1322 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1358