Read the docs
TI-2024-35009 Aliases CVE-2024-52337GHSA-8c3c-gvf8-p7v2

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Priority LOW 25CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Partial Red Hat: 59 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator. The quotes '' are usually used in TuneD logs citing raw user input, so there will always be the ' character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned's D-Bus interface for such operations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.003 22nd percentileScored 2026-11-07
Fix Partial tuned: 2.24.1Red Hat: 11 advisoriesRed Hat: 59 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—tuned2.23.0 to before 2.24.12.24.1Patch availableCNA
Red HatFast Datapath for Red Hat Enterprise Linux 7—2.11.0-5.el7fdp.2Patch availableCNA
Red HatFast Datapath for Red Hat Enterprise Linux 8—2.24.0-2.1.20240819gitc082797f.el8fdpPatch availableCNA
Red HatFast Datapath for Red Hat Enterprise Linux 9—2.24.0-2.1.20240819gitc082797f.el9fdpPatch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—2.11.0-13.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—2.11.0-13.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—2.22.1-5.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8—2.22.1-5.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—2.20.0-1.el8_4.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—2.20.0-1.el8_4.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—2.20.0-1.el8_4.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—2.20.0-1.el8_6.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—2.20.0-1.el8_6.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—2.20.0-1.el8_6.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—2.20.0-2.el8_8.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9—2.24.0-2.el9_5Patch availableCNA
Red HatRed Hat Enterprise Linux 9—2.24.0-2.el9_5Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—2.20.0-3.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—2.22.1-3.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 10——No fix listedCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
  • tuned Vendor— Affected 2.23.0 to before 2.24.1 Fixed in 2.24.1 Patch available CNA
  • Fast Datapath for Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 2.11.0-5.el7fdp.2 Patch available CNA
  • Fast Datapath for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.24.0-2.1.20240819gitc082797f.el8fdp Patch available CNA
  • Fast Datapath for Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.24.0-2.1.20240819gitc082797f.el9fdp Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 2.11.0-13.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 2.11.0-13.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.22.1-5.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.22.1-5.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.20.0-1.el8_4.2 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2.20.0-1.el8_4.2 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.20.0-1.el8_4.2 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.20.0-1.el8_6.2 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2.20.0-1.el8_6.2 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.20.0-1.el8_6.2 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 2.20.0-2.el8_8.1 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.24.0-2.el9_5 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.24.0-2.el9_5 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 2.20.0-3.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 2.22.1-3.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE names CNA · 60

CPEVersionsRoleVendor
cpe:/o:redhat:enterprise_linux:7::fastdatapath7—Red Hat
cpe:/o:redhat:enterprise_linux:8::fastdatapath8—Red Hat
cpe:/o:redhat:enterprise_linux:9::fastdatapath9—Red Hat
cpe:/a:redhat:rhel_extras_rt_els:77—Red Hat
cpe:/a:redhat:rhel_extras_sap_els:77—Red Hat
cpe:/a:redhat:rhel_extras_sap_hana_els:77—Red Hat
cpe:/o:redhat:rhel_els:77—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/a:redhat:enterprise_linux:8::nfv8—Red Hat
cpe:/a:redhat:enterprise_linux:8::realtime8—Red Hat
  • cpe:/o:redhat:enterprise_linux:7::fastdatapath Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:8::fastdatapath Versions 8 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:9::fastdatapath Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_extras_rt_els:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:rhel_extras_sap_els:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:rhel_extras_sap_hana_els:7 Versions 7 — ·Red Hat
  • cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::nfv Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::realtime Versions 8 — ·Red Hat
Show 50 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:enterprise_linux:8::sap8—Red Hat
cpe:/a:redhat:enterprise_linux:8::sap_hana8—Red Hat
cpe:/o:redhat:enterprise_linux:8::baseos8—Red Hat
cpe:/a:redhat:rhel_aus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_e4s:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_e4s:8.4::sap8.4—Red Hat
cpe:/a:redhat:rhel_e4s:8.4::sap_hana8.4—Red Hat
cpe:/a:redhat:rhel_tus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_tus:8.4::nfv8.4—Red Hat
cpe:/a:redhat:rhel_tus:8.4::realtime8.4—Red Hat
cpe:/o:redhat:rhel_aus:8.4::baseos8.4—Red Hat
cpe:/o:redhat:rhel_e4s:8.4::baseos8.4—Red Hat
cpe:/o:redhat:rhel_tus:8.4::baseos8.4—Red Hat
cpe:/a:redhat:rhel_aus:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.6::nfv8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.6::sap8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.6::sap_hana8.6—Red Hat
cpe:/a:redhat:rhel_tus:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_tus:8.6::nfv8.6—Red Hat
cpe:/a:redhat:rhel_tus:8.6::realtime8.6—Red Hat
cpe:/o:redhat:rhel_aus:8.6::baseos8.6—Red Hat
cpe:/o:redhat:rhel_e4s:8.6::baseos8.6—Red Hat
cpe:/o:redhat:rhel_tus:8.6::baseos8.6—Red Hat
cpe:/a:redhat:rhel_eus:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_eus:8.8::nfv8.8—Red Hat
cpe:/a:redhat:rhel_eus:8.8::realtime8.8—Red Hat
cpe:/a:redhat:rhel_eus:8.8::sap8.8—Red Hat
cpe:/a:redhat:rhel_eus:8.8::sap_hana8.8—Red Hat
cpe:/o:redhat:rhel_eus:8.8::baseos8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/a:redhat:enterprise_linux:9::nfv9—Red Hat
cpe:/a:redhat:enterprise_linux:9::realtime9—Red Hat
cpe:/a:redhat:enterprise_linux:9::sap9—Red Hat
cpe:/a:redhat:enterprise_linux:9::sap_hana9—Red Hat
cpe:/o:redhat:enterprise_linux:9::baseos9—Red Hat
cpe:/a:redhat:rhel_eus:9.2::appstream9.2—Red Hat
cpe:/a:redhat:rhel_eus:9.2::nfv9.2—Red Hat
cpe:/a:redhat:rhel_eus:9.2::realtime9.2—Red Hat
cpe:/a:redhat:rhel_eus:9.2::sap9.2—Red Hat
cpe:/a:redhat:rhel_eus:9.2::sap_hana9.2—Red Hat
cpe:/o:redhat:rhel_eus:9.2::baseos9.2—Red Hat
cpe:/a:redhat:rhel_eus:9.4::appstream9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.4::nfv9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.4::realtime9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.4::sap9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.4::sap_hana9.4—Red Hat
cpe:/o:redhat:rhel_eus:9.4::baseos9.4—Red Hat
cpe:/a:redhat:enterprise_linux:1010—Red Hat
cpe:/o:redhat:rhel_els:66—Red Hat
  • cpe:/a:redhat:enterprise_linux:8::sap Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::sap_hana Versions 8 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:8::baseos Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.4::sap Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.4::sap_hana Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.4::nfv Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.4::realtime Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_tus:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.6::nfv Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.6::sap Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.6::sap_hana Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.6::nfv Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.6::realtime Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_tus:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:8.8::nfv Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:8.8::realtime Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:8.8::sap Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:8.8::sap_hana Versions 8.8 — ·Red Hat
  • cpe:/o:redhat:rhel_eus:8.8::baseos Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::nfv Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::realtime Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::sap Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::sap_hana Versions 9 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.2::nfv Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.2::realtime Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.2::sap Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.2::sap_hana Versions 9.2 — ·Red Hat
  • cpe:/o:redhat:rhel_eus:9.2::baseos Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::nfv Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::realtime Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::sap Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::sap_hana Versions 9.4 — ·Red Hat
  • cpe:/o:redhat:rhel_eus:9.4::baseos Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat
  • cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat

Remediation

  • Fix · CNA tuned Fixed in 2.24.1

Red Hat 11 advisories

  • RHSA-2025:1802 Released 2025-02-25 · Red Hat rating Moderate
    tuned security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) tuned-gtk-2.20.0-3.el9_2, tuned-profiles-atomic-2.20.0-3.el9_2, tuned-profiles-mssql-2.20.0-3.el9_2 +4
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) tuned-2.20.0-3.el9_2, tuned-profiles-cpu-partitioning-2.20.0-3.el9_2
    • Red Hat Enterprise Linux Real Time EUS (v.9.2) tuned-profiles-realtime-2.20.0-3.el9_2
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) tuned-profiles-nfv-2.20.0-3.el9_2, tuned-profiles-nfv-guest-2.20.0-3.el9_2, tuned-profiles-nfv-host-2.20.0-3.el9_2 +1
    • Red Hat Enterprise Linux for SAP EUS (v.9.2) tuned-profiles-sap-2.20.0-3.el9_2
    • Red Hat Enterprise Linux for SAP HANA EUS (v.9.2) tuned-profiles-sap-hana-2.20.0-3.el9_2
  • RHSA-2025:1785 Released 2025-02-25 · Red Hat rating Moderate
    tuned security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) tuned-gtk-2.22.1-3.el9_4, tuned-profiles-atomic-2.22.1-3.el9_4, tuned-profiles-mssql-2.22.1-3.el9_4 +4
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) tuned-2.22.1-3.el9_4, tuned-profiles-cpu-partitioning-2.22.1-3.el9_4
    • Red Hat Enterprise Linux Real Time EUS (v.9.4) tuned-profiles-realtime-2.22.1-3.el9_4
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) tuned-profiles-nfv-2.22.1-3.el9_4, tuned-profiles-nfv-guest-2.22.1-3.el9_4, tuned-profiles-nfv-host-2.22.1-3.el9_4 +1
    • Red Hat Enterprise Linux for SAP EUS (v.9.4) tuned-profiles-sap-2.22.1-3.el9_4
    • Red Hat Enterprise Linux for SAP HANA EUS (v.9.4) tuned-profiles-sap-hana-2.22.1-3.el9_4
  • RHSA-2025:0881 Released 2025-02-03 · Red Hat rating Moderate
    tuned security update
    • Fast Datapath for Red Hat Enterprise Linux 7 tuned-2.11.0-5.el7fdp.2, tuned-gtk-2.11.0-5.el7fdp.2, tuned-profiles-atomic-2.11.0-5.el7fdp.2 +11
Show 8 more Red Hat advisories
  • RHSA-2025:0880 Released 2025-02-03 · Red Hat rating Important
    tuned security update
    • Fast Datapath for Red Hat Enterprise Linux 8 tuned-2.24.0-2.1.20240819gitc082797f.el8fdp, tuned-gtk-2.24.0-2.1.20240819gitc082797f.el8fdp, tuned-ppd-2.24.0-2.1.20240819gitc082797f.el8fdp +16
  • RHSA-2025:0879 Released 2025-02-03 · Red Hat rating Important
    tuned security update
    • Fast Datapath for Red Hat Enterprise Linux 9 tuned-2.24.0-2.1.20240819gitc082797f.el9fdp, tuned-gtk-2.24.0-2.1.20240819gitc082797f.el9fdp, tuned-ppd-2.24.0-2.1.20240819gitc082797f.el9fdp +16
  • RHSA-2025:0368 Released 2025-01-16 · Red Hat rating Moderate
    tuned security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) tuned-gtk-2.20.0-1.el8_6.2, tuned-utils-2.20.0-1.el8_6.2, tuned-utils-systemtap-2.20.0-1.el8_6.2
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) tuned-gtk-2.20.0-1.el8_6.2, tuned-utils-2.20.0-1.el8_6.2, tuned-utils-systemtap-2.20.0-1.el8_6.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) tuned-gtk-2.20.0-1.el8_6.2, tuned-utils-2.20.0-1.el8_6.2, tuned-utils-systemtap-2.20.0-1.el8_6.2
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) tuned-2.20.0-1.el8_6.2, tuned-profiles-atomic-2.20.0-1.el8_6.2, tuned-profiles-compat-2.20.0-1.el8_6.2 +3
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) tuned-2.20.0-1.el8_6.2, tuned-profiles-atomic-2.20.0-1.el8_6.2, tuned-profiles-compat-2.20.0-1.el8_6.2 +3
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) tuned-2.20.0-1.el8_6.2, tuned-profiles-atomic-2.20.0-1.el8_6.2, tuned-profiles-compat-2.20.0-1.el8_6.2 +3
    • Red Hat Enterprise Linux NFV E4S (v.8.6) tuned-profiles-nfv-2.20.0-1.el8_6.2, tuned-profiles-nfv-guest-2.20.0-1.el8_6.2, tuned-profiles-nfv-host-2.20.0-1.el8_6.2 +1
    • Red Hat Enterprise Linux Real Time TUS (v.8.6) tuned-profiles-realtime-2.20.0-1.el8_6.2
    • Red Hat Enterprise Linux Real Time for NFV TUS (v.8.6) tuned-profiles-nfv-2.20.0-1.el8_6.2, tuned-profiles-nfv-guest-2.20.0-1.el8_6.2, tuned-profiles-nfv-host-2.20.0-1.el8_6.2 +1
    • Red Hat Enterprise Linux for SAP E4S (v.8.6) tuned-profiles-sap-2.20.0-1.el8_6.2
    • Red Hat Enterprise Linux for SAP HANA E4S (v.8.6) tuned-profiles-sap-hana-2.20.0-1.el8_6.2
  • RHSA-2025:0327 Released 2025-01-15 · Red Hat rating Moderate
    tuned security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) tuned-gtk-2.20.0-1.el8_4.2, tuned-utils-2.20.0-1.el8_4.2, tuned-utils-systemtap-2.20.0-1.el8_4.2
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) tuned-gtk-2.20.0-1.el8_4.2, tuned-utils-2.20.0-1.el8_4.2, tuned-utils-systemtap-2.20.0-1.el8_4.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) tuned-gtk-2.20.0-1.el8_4.2, tuned-utils-2.20.0-1.el8_4.2, tuned-utils-systemtap-2.20.0-1.el8_4.2
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) tuned-2.20.0-1.el8_4.2, tuned-profiles-atomic-2.20.0-1.el8_4.2, tuned-profiles-compat-2.20.0-1.el8_4.2 +3
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) tuned-2.20.0-1.el8_4.2, tuned-profiles-atomic-2.20.0-1.el8_4.2, tuned-profiles-compat-2.20.0-1.el8_4.2 +3
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) tuned-2.20.0-1.el8_4.2, tuned-profiles-atomic-2.20.0-1.el8_4.2, tuned-profiles-compat-2.20.0-1.el8_4.2 +3
    • Red Hat Enterprise Linux NFV TUS (v.8.4) tuned-profiles-nfv-2.20.0-1.el8_4.2, tuned-profiles-nfv-guest-2.20.0-1.el8_4.2, tuned-profiles-nfv-host-2.20.0-1.el8_4.2 +1
    • Red Hat Enterprise Linux RT TUS (v.8.4) tuned-profiles-realtime-2.20.0-1.el8_4.2
    • Red Hat Enterprise Linux SAP E4S (v.8.4) tuned-profiles-sap-2.20.0-1.el8_4.2
    • Red Hat Enterprise Linux SAPHANA E4S (v.8.4) tuned-profiles-sap-hana-2.20.0-1.el8_4.2
  • RHSA-2025:0195 Released 2025-01-09 · Red Hat rating Moderate
    tuned security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) tuned-gtk-2.20.0-2.el8_8.1, tuned-profiles-postgresql-2.20.0-2.el8_8.1, tuned-utils-2.20.0-2.el8_8.1 +1
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) tuned-2.20.0-2.el8_8.1, tuned-profiles-atomic-2.20.0-2.el8_8.1, tuned-profiles-compat-2.20.0-2.el8_8.1 +3
    • Red Hat Enterprise Linux Real Time EUS (v.8.8) tuned-profiles-realtime-2.20.0-2.el8_8.1
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.8.8) tuned-profiles-nfv-2.20.0-2.el8_8.1, tuned-profiles-nfv-guest-2.20.0-2.el8_8.1, tuned-profiles-nfv-host-2.20.0-2.el8_8.1 +1
    • Red Hat Enterprise Linux for SAP EUS (v.8.8) tuned-profiles-sap-2.20.0-2.el8_8.1
    • Red Hat Enterprise Linux for SAP HANA EUS (v.8.8) tuned-profiles-sap-hana-2.20.0-2.el8_8.1
  • RHSA-2024:11161 Released 2024-12-17 · Red Hat rating Moderate
    tuned security update
    • Red Hat Enterprise Linux AppStream (v. 8) tuned-gtk-2.22.1-5.el8_10, tuned-profiles-postgresql-2.22.1-5.el8_10, tuned-utils-2.22.1-5.el8_10 +1
    • Red Hat Enterprise Linux BaseOS (v. 8) tuned-2.22.1-5.el8_10, tuned-profiles-atomic-2.22.1-5.el8_10, tuned-profiles-compat-2.22.1-5.el8_10 +3
    • Red Hat Enterprise Linux NFV (v. 8) tuned-profiles-nfv-2.22.1-5.el8_10, tuned-profiles-nfv-guest-2.22.1-5.el8_10, tuned-profiles-nfv-host-2.22.1-5.el8_10 +1
    • Red Hat Enterprise Linux RT (v. 8) tuned-profiles-realtime-2.22.1-5.el8_10
    • Red Hat Enterprise Linux SAP (v. 8) tuned-profiles-sap-2.22.1-5.el8_10
    • Red Hat Enterprise Linux SAPHANA (v. 8) tuned-profiles-sap-hana-2.22.1-5.el8_10
  • RHSA-2024:10384 Released 2024-11-26 · Red Hat rating Important
    tuned security update
    • Red Hat Enterprise Linux AppStream (v. 9) tuned-gtk-2.24.0-2.el9_5, tuned-ppd-2.24.0-2.el9_5, tuned-profiles-atomic-2.24.0-2.el9_5 +5
    • Red Hat Enterprise Linux BaseOS (v. 9) tuned-2.24.0-2.el9_5, tuned-profiles-cpu-partitioning-2.24.0-2.el9_5
    • Red Hat Enterprise Linux Real Time (v. 9) tuned-profiles-realtime-2.24.0-2.el9_5
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) tuned-profiles-nfv-2.24.0-2.el9_5, tuned-profiles-nfv-guest-2.24.0-2.el9_5, tuned-profiles-nfv-host-2.24.0-2.el9_5 +1
    • Red Hat Enterprise Linux for SAP (v. 9) tuned-profiles-sap-2.24.0-2.el9_5
    • Red Hat Enterprise Linux for SAP HANA (v. 9) tuned-profiles-sap-hana-2.24.0-2.el9_5
  • RHSA-2024:10381 Released 2024-11-26 · Red Hat rating Moderate
    tuned security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) tuned-2.11.0-13.el7_9, tuned-profiles-cpu-partitioning-2.11.0-13.el7_9, tuned-utils-2.11.0-13.el7_9
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) tuned-gtk-2.11.0-13.el7_9, tuned-profiles-atomic-2.11.0-13.el7_9, tuned-profiles-compat-2.11.0-13.el7_9 +3
    • Red Hat Enterprise Linux Server for SAP ELS (v. 7) tuned-profiles-sap-2.11.0-13.el7_9
    • Red Hat Enterprise Linux Server for SAPHANA ELS (v. 7) tuned-profiles-sap-hana-2.11.0-13.el7_9
    • Red Hat Enterprise Linux for Real Time (v. 7 ELS) tuned-profiles-realtime-2.11.0-13.el7_9

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Fast Datapath for Red Hat Enterprise Linux 8, Fast Datapath for Red Hat Enterprise Linux 9 and 4 more products — RHSA-2024:10384

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2024-35008 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by rootPriority LOW 36
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Fast Datapath for Red Hat Enterprise Linux 8, Fast Datapath for Red Hat Enterprise Linux 9 and 4 more products — RHSA-2025:0879

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2024-35008 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by rootPriority LOW 36
    Show all 2 records → Advisory →
Show 1 more group
  • Advisory ·

    Red Hat Fast Datapath for Red Hat Enterprise Linux 8, Fast Datapath for Red Hat Enterprise Linux 9 and 4 more products — RHSA-2025:0880

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2024-35008 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by rootPriority LOW 36
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Fast Datapath for Red Hat Enterprise Linux 7Fixed RHSA-2025:0881
Fast Datapath for Red Hat Enterprise Linux 8Fixed RHSA-2025:0880
Fast Datapath for Red Hat Enterprise Linux 9Fixed RHSA-2025:0879
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:11161
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:10384
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2025:0195
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2025:1802
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:1785
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:11161
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2024:10384
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2025:0195
Red Hat Enterprise Linux BaseOS EUS (v.9.2)Fixed RHSA-2025:1802
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2025:1785
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux NFV (v. 8)Fixed RHSA-2024:11161
Red Hat Enterprise Linux NFV E4S (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux NFV TUS (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux RT (v. 8)Fixed RHSA-2024:11161
Red Hat Enterprise Linux RT TUS (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2024:10384
Red Hat Enterprise Linux Real Time EUS (v.8.8)Fixed RHSA-2025:0195
Red Hat Enterprise Linux Real Time EUS (v.9.2)Fixed RHSA-2025:1802
Red Hat Enterprise Linux Real Time EUS (v.9.4)Fixed RHSA-2025:1785
Red Hat Enterprise Linux Real Time TUS (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2024:10384
Red Hat Enterprise Linux Real Time for NFV EUS (v.8.8)Fixed RHSA-2025:0195
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)Fixed RHSA-2025:1802
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)Fixed RHSA-2025:1785
Red Hat Enterprise Linux Real Time for NFV TUS (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux SAP (v. 8)Fixed RHSA-2024:11161
Red Hat Enterprise Linux SAP E4S (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux SAPHANA (v. 8)Fixed RHSA-2024:11161
Red Hat Enterprise Linux SAPHANA E4S (v.8.4)Fixed RHSA-2025:0327
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2024:10381
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2024:10381
Red Hat Enterprise Linux Server for SAP ELS (v. 7)Fixed RHSA-2024:10381
Red Hat Enterprise Linux Server for SAPHANA ELS (v. 7)Fixed RHSA-2024:10381
Red Hat Enterprise Linux for Real Time (v. 7 ELS)Fixed RHSA-2024:10381
Red Hat Enterprise Linux for SAP (v. 9)Fixed RHSA-2024:10384
Red Hat Enterprise Linux for SAP E4S (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux for SAP EUS (v.8.8)Fixed RHSA-2025:0195
Red Hat Enterprise Linux for SAP EUS (v.9.2)Fixed RHSA-2025:1802
Red Hat Enterprise Linux for SAP EUS (v.9.4)Fixed RHSA-2025:1785
Red Hat Enterprise Linux for SAP HANA (v. 9)Fixed RHSA-2024:10384
Red Hat Enterprise Linux for SAP HANA E4S (v.8.6)Fixed RHSA-2025:0368
Red Hat Enterprise Linux for SAP HANA EUS (v.8.8)Fixed RHSA-2025:0195
Red Hat Enterprise Linux for SAP HANA EUS (v.9.2)Fixed RHSA-2025:1802
Red Hat Enterprise Linux for SAP HANA EUS (v.9.4)Fixed RHSA-2025:1785

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-52337
  2. 2026-10-03 Alias added: GHSA-8c3c-gvf8-p7v2

References

Advisory 11

Other 5

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7412 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences