CVE-2024-41029

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the nvmem core in the Linux kernel, where the cell sysfs attribute provides more access to nvmem data than the main attribute itself. For instance, if nvme config::root only is set, the cell attribute still allows read access to everybody, despite the main attribute's restrictions. The fix involves masking out permissions not available on the main attribute.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.