VulnerabilityDeferred
CVE-2024-24898
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure.
MEDIUM 6.0EPSS 0.22%
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program files https://gitee.Com/openeuler/kernel/blob/openEuler-1.0-LTS/drivers/staging/gmjstcm/tcm.C. This issue affects kernel: from 4.19.90-2109.1.0.0108 before 4.19.90-2403.4.0.0244.
- CVSS 3.1
- 6.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- EPSS
- 0.22% probability · 13th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Source
- securities@openeuler.org
References
- https://gitee.com/src-openeuler/kernel/pulls/1320
- https://gitee.com/src-openeuler/kernel/pulls/1321
- https://gitee.com/src-openeuler/kernel/pulls/1322
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1358
- https://gitee.com/src-openeuler/kernel/pulls/1320
- https://gitee.com/src-openeuler/kernel/pulls/1321
- https://gitee.com/src-openeuler/kernel/pulls/1322
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1358
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.