CVE-2024-6126 is a vulnerability in the Cockpit service, which provides web-based administration capabilities for GNU/Linux servers. The flaw allows an authenticated user to kill any process on the system if the pam_env module's user_readenv option is enabled. This could potentially allow disruption of system processes by authorized users. The issue is addressed in the Red Hat Enterprise Linux 9.5 update, which rebases Cockpit to a fixed version. The vulnerability is classified under CWE-400 (Uncontrolled Resource Consumption).

An authenticated user with access to the Cockpit interface and with pam_env's user_readenv option enabled can terminate arbitrary processes on the system. This could lead to denial of service or disruption of services managed by those processes. The impact is limited by the requirement for authentication and specific configuration settings. No known active exploitation has been reported.

Red Hat has released an official security update for Cockpit in Red Hat Enterprise Linux 9.5 that fixes this vulnerability. Users should apply the update as described in Red Hat advisory RHSA-2024:9325 and the associated update article (https://access.redhat.com/articles/11258). Applying this update mitigates the vulnerability. No additional mitigation steps are indicated by the vendor.