CVE-2024-5300VulnerabilityPublished 06/24/2026Updated 10/05/2026

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Affects Red Hat Product Security Red HatSource GCVE Database

Authoritative record:CVE-2024-5300· Medium 5.6

Not known to be exploited · CVSS 5.6 Medium · fixed in 2.61.4ubuntu0.16.04.1+esm4 : update Red Hat Product Security Red Hat when convenient.

Data as of 10/24/2026, 22:16:00 UTC

CVSS 3.1 base score

5.6Medium

How severe the flaw is on the 0–10 CVSS scale.

Exploitation: Not in CISA KEV, no exploitation reported
EPSS: 0.1% chance of exploitation in 30 days – higher than 2% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in 2.61.4ubuntu0.16.04.1+esm4, 2.61.4ubuntu0.18.04.1+esm4, 2.67.1+20.04ubuntu1~esm3 +3

What to do

Affected software

Product	Affected	Fixed in
Ubuntu:Pro:16.04:LTSsnapd`pkg:deb/ubuntu/snapd@2.61.4ubuntu0.16.04.1+esm4?arch=source&distro=esm-infra-legacy/xenial`Other threats	Affected <2.61.4ubuntu0.16.04.1+esm4 =1.9 =1.9.1.1 =1.9.2 =2.0 =2.0.1 =2.0.2 =2.0.3 =2.0.5 =2.0.8 =2.0.9 =2.0.10 =2.11+0.16.04 =2.12+0.16.04 =2.13 =2.14.2~16.04 =2.15.2ubuntu1 =2.16ubuntu3 =2.17.1ubuntu1 =2.20.1ubuntu1 =2.21 =2.22.2 =2.22.3 =2.22.6 =2.23.1 =2.24.1 =2.25 =2.26.10 =2.27.5 =2.28.5 =2.29.4.2 =2.32.3.2 =2.32.9 =2.33.1ubuntu2 =2.34.2 =2.34.2ubuntu0.1 =2.37.4 =2.37.4ubuntu0.1 =2.38 =2.39.2 =2.39.2ubuntu0.2 =2.40 =2.42.1 =2.45.1 =2.45.1ubuntu0.2 =2.46.1 =2.47.1 =2.48 =2.48.3 =2.54.3+16.04~esm2 =2.54.3+16.04.0ubuntu0.1~esm3 =2.54.3+16.04.0ubuntu0.1~esm4 =2.54.3+16.04.0ubuntu0.1~esm5 =2.54.3+16.04.0ubuntu0.1~esm6 =2.61.4ubuntu0.16.04.1+esm1 =2.61.4ubuntu0.16.04.1+esm2	Fixed in 2.61.4ubuntu0.16.04.1+esm4
Ubuntu:Pro:18.04:LTSsnapd`pkg:deb/ubuntu/snapd@2.61.4ubuntu0.18.04.1+esm4?arch=source&distro=esm-infra/bionic`Other threats	Affected <2.61.4ubuntu0.18.04.1+esm4 =2.28.5+17.10 =2.29.4.1+18.04 =2.29.4.2+18.04 =2.31.1+18.04 =2.32+18.04~pre5 =2.32+18.04~pre6 =2.32+18.04 =2.32.3.2+18.04 =2.32.5+18.04 =2.32.8+18.04 =2.32.9+18.04 =2.33.1+18.04ubuntu2 =2.34.2+18.04 =2.34.2+18.04.1 =2.37.1+18.04 =2.37.1.1+18.04 =2.37.4+18.04 =2.37.4+18.04.1 =2.38+18.04 =2.39.2+18.04 =2.40+18.04 =2.42.1+18.04 =2.45.1+18.04 =2.45.1+18.04.2 =2.46.1+18.04 =2.47.1+18.04 =2.48+18.04 =2.48.3+18.04 =2.49.2+18.04 =2.51.1+18.04 =2.54.2+18.04ubuntu1 =2.54.3+18.04 =2.54.3+18.04.2ubuntu0.1 =2.54.3+18.04.2ubuntu0.2 =2.55.5+18.04 =2.57.5+18.04 =2.57.5+18.04ubuntu0.1 =2.58+18.04 =2.58+18.04.1 =2.61.4ubuntu0.18.04.1+esm1 =2.61.4ubuntu0.18.04.1+esm2	Fixed in 2.61.4ubuntu0.18.04.1+esm4
Ubuntu:Pro:20.04:LTSsnapd`pkg:deb/ubuntu/snapd@2.67.1+20.04ubuntu1~esm3?arch=source&distro=esm-infra/focal`Other threats	Affected <2.67.1+20.04ubuntu1~esm3 =2.41+19.10.1 =2.42.1+20.04 =2.43.3+git1.8109f8 =2.44~pre1+20.04 =2.44+20.04 =2.44.2+20.04 =2.44.3+20.04 =2.45.1+20.04 =2.45.1+20.04.2 =2.46.1+20.04 =2.47.1+20.04 =2.48+20.04 =2.48.3+20.04 =2.49.2+20.04 =2.51.1+20.04ubuntu2 =2.54.2+20.04ubuntu2 =2.54.3+20.04 =2.54.3+20.04.1 =2.54.3+20.04.1ubuntu0.1 =2.54.3+20.04.1ubuntu0.2 =2.54.3+20.04.1ubuntu0.3 =2.55.5+20.04 =2.57.5+20.04 =2.57.5+20.04ubuntu0.1 =2.58+20.04 =2.58+20.04.1 =2.61.3+20.04 =2.62+20.04 =2.63+20.04 =2.63+20.04ubuntu0.1 =2.65.3+20.04 =2.66.1+20.04 =2.67.1+20.04 =2.67.1+20.04ubuntu1~esm1	Fixed in 2.67.1+20.04ubuntu1~esm3
Ubuntu:22.04:LTSsnapd`pkg:deb/ubuntu/snapd@2.76+ubuntu22.04.1?arch=source&distro=jammy`Other threats	Affected <2.76+ubuntu22.04.1 =2.53+21.10ubuntu1 =2.54.2+22.04ubuntu1 =2.54.2+22.04ubuntu2 =2.54.2+22.04ubuntu3 =2.54.3+git19.g868fc21+22.04 =2.54.3+git26.g360067e+22.04 =2.55.2+22.04 =2.55.2+22.04.1 =2.55.3+22.04 =2.55.3+22.04ubuntu1 =2.55.5+22.04 =2.56.2+22.04ubuntu1 =2.57.4+22.04 =2.57.5+22.04 =2.57.5+22.04ubuntu0.1 =2.58+22.04 =2.58+22.04.1 =2.61.3+22.04 =2.62+22.04 =2.63+22.04 =2.63+22.04ubuntu0.1 =2.65.3+22.04 =2.66.1+22.04 =2.67.1+22.04 =2.68.5+ubuntu22.04.1 =2.71+ubuntu22.04 =2.72+ubuntu22.04 =2.73+ubuntu22.04 =2.73+ubuntu22.04.1 =2.74.1+ubuntu22.04.4 =2.75.2+ubuntu22.04 =2.76+ubuntu22.04	Fixed in 2.76+ubuntu22.04.1
Ubuntu:24.04:LTSsnapd`pkg:deb/ubuntu/snapd@2.76+ubuntu24.04.1?arch=source&distro=noble`Other threats	Affected <2.76+ubuntu24.04.1 =2.60.4+23.10 =2.61.3+24.04 =2.62+24.04build1 =2.63+24.04 =2.63+24.04ubuntu0.1 =2.63.1+24.04 =2.65.3+24.04 =2.66.1+24.04 =2.67.1+24.04 =2.68.5+ubuntu24.04.1 =2.71+ubuntu24.04 =2.72+ubuntu24.04 =2.73+ubuntu24.04 =2.73+ubuntu24.04.1 =2.73+ubuntu24.04.2 =2.74.1+ubuntu24.04.4 =2.75.2+ubuntu24.04 =2.76+ubuntu24.04	Fixed in 2.76+ubuntu24.04.1
Ubuntu:25.10snapd`pkg:deb/ubuntu/snapd@2.75.2+ubuntu25.10?arch=source&distro=questing`Other threats	Affected =2.67.1+25.04 =2.68.5+ubuntu25.10.2 =2.71+ubuntu25.10 =2.71.1+ubuntu25.10.1 =2.72+ubuntu25.10.2 =2.73+ubuntu25.10 =2.73+ubuntu25.10.1 =2.74.1+ubuntu25.10.4 =2.75.2+ubuntu25.10	Fixed in–
Ubuntu:26.04:LTSsnapd`pkg:deb/ubuntu/snapd@2.76+ubuntu26.04.3?arch=source&distro=resolute`Other threats	Affected <2.76+ubuntu26.04.3 =2.71.1+ubuntu25.10.1 =2.72+ubuntu26.04.1 =2.73+ubuntu26.04.1 =2.74+ubuntu26.04 =2.74.1+ubuntu26.04 =2.74.1+ubuntu26.04.3 =2.74.1+ubuntu26.04.4 =2.75.2+ubuntu26.04.2 =2.76+ubuntu26.04.2	Fixed in 2.76+ubuntu26.04.3

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

This update includes the following RPMs: systemd: * systemd-261-2.hum1 (aarch64, x86_64) * systemd-boot-unsigned-261-2.hum1 (aarch64, x86_64) * systemd-container-261-2.hum1 (aarch64, x86_64) * systemd-devel-261-2.hum1 (aarch64, x86_64) * systemd-journal-remote-261-2.hum1 (aarch64, x86_64) * systemd-libs-261-2.hum1 (aarch64, x86_64) * systemd-networkd-261-2.hum1 (aarch64, x86_64) * systemd-networkd-defaults-261-2.hum1 (noarch) * systemd-oomd-defaults-261-2.hum1 (noarch) * systemd-pam-261-2.hum1 (aarch64, x86_64) * systemd-resolved-261-2.hum1 (aarch64, x86_64) * systemd-rpm-macros-261-2.hum1 (noarch) * systemd-shared-261-2.hum1 (aarch64, x86_64) * systemd-standalone-repart-261-2.hum1 (aarch64, x86_64) * systemd-standalone-shutdown-261-2.hum1 (aarch64, x86_64) * systemd-standalone-sysusers-261-2.hum1 (aarch64, x86_64) * systemd-standalone-tmpfiles-261-2.hum1 (aarch64, x86_64) * systemd-sysusers-261-2.hum1 (aarch64, x86_64) * systemd-tests-261-2.hum1 (aarch64, x86_64) * systemd-udev-261-2.hum1 (aarch64, x86_64) * systemd-ukify-261-2.hum1 (noarch) * systemd-261-2.hum1.src (src)

Weaknesses

CWE-1220Insufficient Granularity of Access Control (opens in a new tab)
Base weakness
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.
Architecture and Design · Implementation · Testing
Access-control-policy protections must be reviewed for design inconsistency and common weaknesses.; Access-control-policy definition and programming flow must be tested in pre-silicon, post-silicon testing.
OWASP Cheat Sheets
Docker Security (opens in a new tab)
Third Party Javascript Management (opens in a new tab)
Virtual Patching (opens in a new tab)
OWASP ASVS 4.0.3
V1.4.4 (opens in a new tab)
V1.4.5 (opens in a new tab)
V1.10.1 (opens in a new tab)
Attack patterns
Accessing Functionality Not Properly Constrained by ACLs (opens in a new tab)
Exploiting Incorrectly Configured Access Control Security Levels (opens in a new tab)
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).

References

Community reviews

Loading reviews…