Bug 1225774 (CVE-2024-36041) - VUL-0: CVE-2024-36041: plasma5-workspace,plasma6-workspace: ksmserver: Unauthorized users can access session manager
Summary: VUL-0: CVE-2024-36041: plasma5-workspace,plasma6-workspace: ksmserver: Unauth...
Status: IN_PROGRESS
Alias: CVE-2024-36041
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: Security (show other bugs)
Version: Current
Hardware: Other Other
: P3 - Medium : Normal (vote)
Target Milestone: ---
Assignee: Security Team bot
QA Contact: E-mail List
URL: https://smash.suse.de/issue/408355/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-31 19:00 UTC by Fabian Vogt
Modified: 2024-06-10 14:55 UTC (History)
4 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Fabian Vogt 2024-05-31 19:00:05 UTC 
CVE-2024-36041 https://kde.org/info/security/advisory-20240531-1.txt

Needs two patches added to plasma5-workspace in 15.5 + 15.6 as well as plasma6-workspace in Tumbleweed.
Comment 1 Fabian Vogt 2024-05-31 19:35:12 UTC 
Submissions:

TW: https://build.opensuse.org/request/show/1177981
15.5: https://build.opensuse.org/request/show/1177980 wants a review from backports for some reason?
15.6: https://build.opensuse.org/request/show/1177979 apparently the :Update project isn't set up yet?
Comment 3 OBSbugzilla Bot 2024-06-03 08:45:01 UTC 
This is an autogenerated message for OBS integration:
This bug (1225774) was mentioned in
https://build.opensuse.org/request/show/1178248 Backports:SLE-15-SP6 / plasma5-workspace
Comment 4 Marcus Meissner 2024-06-06 13:04:50 UTC 
openSUSE-SU-2024:0152-1: An update that fixes one vulnerability is now available.

Category: security (important)
Bug References: 1225774
CVE References: CVE-2024-36041
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP5 (src):    plasma5-workspace-5.27.9-bp155.2.6.1
Comment 5 Andreas Schwab 2024-06-07 16:40:18 UTC 
This completely breaks session management.  It is no longer possible to restore a session at login, neither the current session nor a manually saved one.
Comment 6 Fabian Vogt 2024-06-08 11:19:58 UTC 
(In reply to Andreas Schwab from comment #5)
> This completely breaks session management.  It is no longer possible to
> restore a session at login, neither the current session nor a manually saved
> one.

More details are needed there. I suspect it's because the $ICEAUTHORITY variable is not set properly or the authority file is inaccessible.

Please file a new bug report though, this is only about the security issue.
Comment 7 OBSbugzilla Bot 2024-06-10 14:55:01 UTC 
This is an autogenerated message for OBS integration:
This bug (1225774) was mentioned in
https://build.opensuse.org/request/show/1179708 Backports:SLE-15-SP6 / plasma5-workspace