Medium severity5.9NVD Advisory· Published Jun 26, 2025· Updated Jun 17, 2026

CVE-2024-11584

Description

cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

cloud-init/cloud-initllm-create
Range: <=25.1.2
osv-coords7 versions
pkg:rpm/opensuse/cloud-init&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cloud-init&distro=openSUSE%20Tumbleweed pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Micro%206.2
< 25.1.3-160000.2.1+ 6 more
- (no CPE)range: < 25.1.3-160000.2.1
- (no CPE)range: < 25.1.3-1.1
- (no CPE)range: < 25.1.3-160000.2.1
- (no CPE)range: < 25.1.3-160000.2.1
- (no CPE)range: < 25.1.3-1.1
- (no CPE)range: < 25.1.3-slfo.1.1_1.1
- (no CPE)range: < 25.1.3-160000.2.1
Canonical/cloud-initv5
Range: 21.3

Patches

Vulnerability mechanics

References

github.com/canonical/cloud-init/pull/6265/commits/6e10240a7f0a2d6110b398640b3fd46cfa9a7cf3nvdPatch
github.com/canonical/cloud-init/releases/tag/25.1.3nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000