Riskcovery

CVE-2024-41029

nvmem: core: limit cell sysfs permissions to main attribute ones

State
Published
Severity
Not scored
Published
Jul 29, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvmem: core: limit cell sysfs permissions to main attribute ones

The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvme_config::root_only was set, the cell attribute would still provide read access to everybody.

Mask out permissions not available on the main attribute.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0331c611949fffdf486652450901a4dc52bc5cca to before aa066afaaac32caf2160d58d4e3010ee04421c62Affected
  • 0331c611949fffdf486652450901a4dc52bc5cca to before 6bef98bafd82903a8d461463f9594f19f1fd6a85Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.9.10 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.