PT-2024-29204 · Linux+1 · Linux Kernel+1

Published 2024-07-29 · Updated 2025-02-03 · CVE-2024-41024

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue allows an untrusted application with access to only a non-secure fastrpc device node to attach to root pd or static PDs if it can make the respective init request. This can cause problems as the untrusted application can send bad requests to root pd or static PDs. Changes have been made to reject attach to privileged PDs if the request is being made using a non-secure fastrpc device node.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-41024

MGASA-2024-0277

MGASA-2024-0278

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

Affected Products

Linux Kernel

Suse

References · 920

• https://nvd.nist.gov/vuln/detail/CVE-2024-41024 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-41024 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3383-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41024 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3195-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-41024 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0278 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-41024 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0278.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20044-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20047-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0277.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:3194-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-41024 · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0277 · Vendor Advisory