3.6

CVE-2024-38531: nixos nix Insecure Preserved Inherited Permissions

CVSS: 3.6v3.1LowDeferred
AliasesUBUNTU-CVE-2024-38531DEBIAN-CVE-2024-38531
Published 28-06-2024Last modified 02-08-2024
Open JSON

Vulnerability summary

CVE-2024-38531 is a low (CVSS 3.6) Insecure Preserved Inherited Permissions vulnerability in nixos nix. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.3% of scored vulnerabilities.

Overall risk
14/100
0100
Low · default modelHow is this calculated?
CVSS score
3.6/10
010
Low · v3.1 (CVE.org)
EPSS score
0.14%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
USN-7633-1

Timeline

  1. 28-06-2024
    PublishedVulnerability first disclosed.
  2. 02-08-2024
    Last modifiedVulnerability information updated.

Description

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assume the permissions of a Nix daemon worker and hijack all future builds. This issue was patched in version(s) 2.23.1, 2.22.2, 2.21.3, 2.20.7, 2.19.5 and 2.18.4.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

0.00 pp

From 0.14% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian1 product
  • nixAll versions (No fix recorded) | < 2.23.3+dfsg-1
Nixos1 product
  • nix≥ 2.23.0, < 2.23.1 | ≥ 2.22.0, < 2.22.2 | ≥ 2.21.0, < 2.21.3 | ≥ 2.20.0, < 2.20.7 | ≥ 2.19.0, < 2.19.5 | ≥ 2.18.0, < 2.18.4
Ubuntu1 product
  • nix< 2.6.0+dfsg-3ubuntu0.1~esm1 | < 2.18.1+dfsg-1ubuntu5+esm2

3 vendors · 3 products

References

6 links