Linux needrestart CVE-2024-48990

Didn't find this CVE on the site. What is the vulnerability of OpenWRT with respect to this just discovered CVE and related CVEs. Has to do with the built-in needrestart process and exploiting a Python path env variable during library updates that re-directs the path to run malware.
new critical linux exploit has been hiding for 10 years

CVE-2024-48990
CVE-2024-48991
CVE-2024-48992
CVE-2024-10224
CVE-2024-11003

Detailed info:

OpenWRT does not contain Ubuntu software in question.

OpenWrt's update management is not Python based. Python itself is an optional package that is not going to be installed for almost all users.

2 Likes

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.