CVE-2024-24891

Public on 2024-04-15

Modified on 2024-06-25

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program files https://gitee.Com/openeuler/kernel/blob/openEuler-1.0-LTS/drivers/staging/gmjstcm/tcm.C.

This issue affects kernel: from 4.19.90-2109.1.0.0108 before 4.19.90-2403.4.0.0244.

Severity

Medium

See what this means

CVSS v3 Base Score

6.0

See breakdown

Affected Packages

Platform	Package	Status
Amazon Linux 1	kernel	Not Affected
Amazon Linux 2 - Core	kernel	Not Affected
Amazon Linux 2 - Kernel-5.10 Extra	kernel	Not Affected
Amazon Linux 2 - Kernel-5.15 Extra	kernel	Not Affected
Amazon Linux 2 - Kernel-5.4 Extra	kernel	Not Affected
Amazon Linux 2023	kernel	Not Affected

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	6.0	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
NVD	CVSSv3	6.0	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2024-24891 Mitre: CVE-2024-24891