CVE-2024-11584
Medium
Description
cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.
SeverityMedium
CVSS5.9
Exploit probability—
ProductCanonical Cloud-init
PublishedJun 26, 2025
First seenJun 26, 2025
Weakness typeCWE-732CWE-732
How to fix
Update
- canonical cloud-init25.1.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canonical cloud-init | v < 25.1.3 | 25.1.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.