GCVE-110-MAGEIA-2025-181

Advisory Published

Vulnetix · Advisory published June 9, 2025

Mageia's internal bug: In the current version you can't login in the web interface with firefox or chromium-browser packaged by Mageia. This update fixes the issue, but it is reported that could need to reboot and clear cookies from your browser. A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack - CVE-2024-6126. Please note that you need to edit /etc/nsswitch.conf as recommended in https://bugs.mageia.org/show_bug.cgi?id=33368#c18.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	cockpit	0 (affected), 338-1.6.mga9 (unaffected)	—

Aliases

CVE-2024-6126

References

Updated cockpit packages fix security vulnerability & bug

advisory

Updated cockpit packages fix security vulnerability & bug

issue

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON