CVE-2024-6126 LOW

CVE-2024-6126: Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option

Vendor Red Hat
Product Red Hat Enterprise Linux 10
Weakness CWE-400
Published July 3, 2024
Last update November 21, 2025
View on NVD All CVEs

CVSS base score

3.2/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L

What the vulnerability does

01Description

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

Key dates

02Disclosure timeline

July 3, 2024 CVE published
November 21, 2025 Record updated