PT-2024-29209 · Linux+2 · Linux Kernel+2

Published

2024-07-03

·

Updated

2025-10-07

·

CVE-2024-41029

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue concerns the nvmem core in the Linux kernel, where the cell sysfs attribute provides more access to nvmem data than the main attribute itself. For instance, if nvme config::root only is set, the cell attribute still allows read access to everybody, despite the main attribute's restrictions. The fix involves masking out permissions not available on the main attribute.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-04542
CVE-2024-41029
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu