CVE-2024-11584

Name of the Vulnerable Software and Affected Versions: cloud-init versions through 25.1.2

Description: The issue concerns the systemd socket unit cloud-init-hotplugd.socket in cloud-init, which has a default SocketMode that grants 0666 permissions, making it world-writable. This affects the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could potentially trigger hotplug-hook commands.

Recommendations: For cloud-init versions through 25.1.2, consider restricting the permissions of the cloud-init-hotplugd.socket to prevent unauthorized access. As a temporary workaround, restrict access to the /run/cloud-init/hook-hotplug-cmd FIFO to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.