CVE-2024-38394
Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic al…
Impact
Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access some unintended Linux kernel USB functionality, such as USB device-specific kernel modules and filesystem implementations. NOTE: the GSD supplier indicates that consideration of a mitigation for this within GSD would be in the context of "a new feature, not a CVE."
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- https://gitlab.gnome.org/GNOME/gnome-settings-daemon/-/issues/780
- https://gitlab.gnome.org/GNOME/gnome-settings-daemon/-/issues/780#note_2047914
- https://gitlab.gnome.org/GNOME/gnome-settings-daemon/-/tags
- https://pulsesecurity.co.nz/advisories/usbguard-bypass
- https://gitlab.gnome.org/GNOME/gnome-settings-daemon/-/issues/780
- https://gitlab.gnome.org/GNOME/gnome-settings-daemon/-/issues/780#note_2047914
- https://gitlab.gnome.org/GNOME/gnome-settings-daemon/-/tags
- https://pulsesecurity.co.nz/advisories/usbguard-bypass