Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-38394

June 16, 2024, 12:15 a.m.

Tags

cve@mitre.org
2024-06-16
CVE-2024-38394

Product(s) Impacted

Linux kernel

  • through 46.0

Description

Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access some unintended Linux kernel USB functionality, such as USB device-specific kernel modules and filesystem implementations. NOTE: the GSD supplier indicates that consideration of a mitigation for this within GSD would be in the context of "a new feature, not a CVE."

Weaknesses

Date

Published: June 16, 2024, 12:15 a.m.

Last Modified: June 16, 2024, 12:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://gitlab.gnome.org/ cve@mitre.org
https://gitlab.gnome.org/ cve@mitre.org
https://gitlab.gnome.org/ cve@mitre.org
https://pulsesecurity.co.nz/ cve@mitre.org