Code Injection in tuned (Red Hat package) - CVE-2024-52336

Vulnerability identifier: #VU101026

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-52336

CWE-ID: CWE-94

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper input validation within the instance_create() D-Bus function. A local user can execute arbitrary script with root privileges.

tuned (Red Hat package)
tuned-doc
tuned-utils-systemtap
tuned-utils
tuned-profiles-spectrumscale
tuned-profiles-realtime
tuned-profiles-postgresql
tuned-profiles-oracle
tuned-profiles-mssql
tuned-profiles-cpu-partitioning
tuned-profiles-compat
tuned-profiles-atomic
tuned-gtk
tuned
tuned-profiles-devel
tuned-help
Red Hat Enterprise Linux Fast Datapath (for RHEL for ARM 64)
Red Hat Enterprise Linux Fast Datapath (for IBM z Systems)
Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE)
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
openEuler
Anolis OS
Fedora
Red Hat Enterprise Linux Fast Datapath
Red Hat OpenShift Container Platform

Install updates from vendor's website.

tuned (Red Hat package) - addressed in versions 2.24.1, 2.24.0-2.el9_5, 2.24.0-2.1.20240819gitc082797f.el8fdp, 2.24.0-2.1.20240819gitc082797f.el9fdp
tuned-doc - update to 2.20.0-2
tuned-utils-systemtap - update to 2.20.0-2
tuned-utils - update to 2.20.0-2
tuned-profiles-spectrumscale - update to 2.20.0-2
tuned-profiles-realtime - update to 2.20.0-2
tuned-profiles-postgresql - update to 2.20.0-2
tuned-profiles-oracle - update to 2.20.0-2
tuned-profiles-mssql - update to 2.20.0-2
tuned-profiles-cpu-partitioning - update to 2.20.0-2
tuned-profiles-compat - update to 2.20.0-2
tuned-profiles-atomic - update to 2.20.0-2
tuned-gtk - update to 2.20.0-2
tuned - update to 2.20.0-2
tuned-profiles-devel - update to 2.24.1-1
tuned-help - update to 2.24.1-1
tuned - update to 2.24.1-1
tuned - addressed in versions 2.24.1-1.fc39, 2.24.1-1.fc40, 2.24.1-1.fc41
Red Hat OpenShift Container Platform - addressed in versions 4.12.73, 4.14.48

• https://bugzilla.redhat.com/show_bug.cgi?id=2324540
• https://github.com/advisories/GHSA-cfjc-m7fv-63xj
• https://github.com/redhat-performance/tuned/releases/tag/v2.24.1

• Multiple vulnerabilities in Tuned
• Red Hat Enterprise Linux 9 update for tuned
• Fedora 41 update for tuned
• Fedora 40 update for tuned
• Fedora 39 update for tuned
• openEuler update for tuned
• Fast Datapath for Red Hat Enterprise Linux 9 update for tuned
• Fast Datapath for Red Hat Enterprise Linux 8 update for tuned
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Anolis OS update for tuned