CVEvulnerability
CVE-2024-24898
6.0 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-04-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- Weaknesses
- CWE-200
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is associated with program files https://gitee.Com/openeuler/kernel/blob/openEuler-1.0-LTS/drivers/staging/gmjstcm/tcm.C.
This issue affects kernel: from 4.19.90-2109.1.0.0108 before 4.19.90-2403.4.0.0244.
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://gitee.com/src-openeuler/kernel/pulls/1320 gitee.com
- https://gitee.com/src-openeuler/kernel/pulls/1321 gitee.com
- https://gitee.com/src-openeuler/kernel/pulls/1322 gitee.com
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1358 www.openeuler.org
- https://gitee.com/src-openeuler/kernel/pulls/1320 gitee.com
- https://gitee.com/src-openeuler/kernel/pulls/1321 gitee.com
- https://gitee.com/src-openeuler/kernel/pulls/1322 gitee.com
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1358 www.openeuler.org