VDB
ALSA-2025%3A11324
ALSA-2025%3A11324
PUBLISHED
The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Security Fix(es): * cloud-init: Cloud init permissions flaw (CVE-2024-6174) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | cloud-init | 0, 0 |
Timeline
- Jul 16, 2025 CVE Published
- Jul 17, 2025 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:11324 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-6174 third-party-advisory
- https://bugzilla.redhat.com/2374924 third-party-advisory
- https://errata.almalinux.org/8/ALSA-2025-11324.html vendor-advisory