CVE - CVE-2024-41024

CVE-ID
CVE-2024-41024	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Restrict untrusted app to attach to privileged PD Untrusted application with access to only non-secure fastrpc device node can attach to root_pd or static PDs if it can make the respective init request. This can cause problems as the untrusted application can send bad requests to root_pd or static PDs. Add changes to reject attach to privileged PDs if the request is being made using non-secure fastrpc device node.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2eb973ee4770a26d9b5e292b58ad29822d321c7f URL:https://git.kernel.org/stable/c/2eb973ee4770a26d9b5e292b58ad29822d321c7f MISC:https://git.kernel.org/stable/c/5e305b5986dc52122a9368a1461f0c13e1de3fd6 URL:https://git.kernel.org/stable/c/5e305b5986dc52122a9368a1461f0c13e1de3fd6 MISC:https://git.kernel.org/stable/c/bab2f5e8fd5d2f759db26b78d9db57412888f187 URL:https://git.kernel.org/stable/c/bab2f5e8fd5d2f759db26b78d9db57412888f187 MISC:https://git.kernel.org/stable/c/c69fd8afacebfdf2f8a1ee1ea7e0723786529874 URL:https://git.kernel.org/stable/c/c69fd8afacebfdf2f8a1ee1ea7e0723786529874 MISC:https://git.kernel.org/stable/c/ea13bd807f1cef1af375d999980a9b9794c789b6 URL:https://git.kernel.org/stable/c/ea13bd807f1cef1af375d999980a9b9794c789b6
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)