# CVE-2024-10041: apparmor: This update for apparmor fixes the following issues: - Add dac_read_search capability for unix_chkpwd to allow it to... CVE-2024-10041 is fixed in 8 products on 1 platform, first by DEBIAN-CVE-2024-10041, released October 23, 2024. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2024-10041 - Priority: Routine - CVSS: 4.7 (Important) - EPSS: 0.0027 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 23, 2024 ## Description This update for apparmor fixes the following issues: - Add dac_read_search capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678) ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | apparmor opensuse-leap 15.6 | 3.1.7-150600.5.9.1 | [SUSE-SU-2025:1511-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1511-1.md) | May 7, 2025 | | Linux | apparmor sles 15.6 | 3.1.7-150600.5.9.1 | [SUSE-SU-2025:1511-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1511-1.md) | May 7, 2025 | | Linux | apparmor sles 15.7 | 3.1.7-150600.5.9.1 | [SUSE-SU-2025:01511-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01511-1.md) | May 29, 2025 | | Linux | libapparmor opensuse-leap 15.6 | 3.1.7-150600.5.9.1 | [SUSE-SU-2025:1511-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1511-1.md) | May 7, 2025 | | Linux | libapparmor sles 15.6 | 3.1.7-150600.5.9.1 | [SUSE-SU-2025:1511-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1511-1.md) | May 7, 2025 | | Linux | libapparmor sles 15.7 | 3.1.7-150600.5.9.1 | [SUSE-SU-2025:01511-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01511-1.md) | May 29, 2025 | | Linux | pam Debian 13.5 (trixie) | 1.7.0-2 | [DEBIAN-CVE-2024-10041](https://patchblox.com/security/data/fix/linux/debian-cve-2024-10041.md) | Oct 23, 2024 | | Linux | pam Debian 14 | 1.7.0-2 | [DEBIAN-CVE-2024-10041](https://patchblox.com/security/data/fix/linux/debian-cve-2024-10041.md) | Oct 23, 2024 | | Linux | pam RHEL 8 | 0:1.3.1-36.el8_10 | [RHSA-2024:10379](https://patchblox.com/security/data/fix/linux/rhsa-2024-10379.md) | Nov 26, 2024 | | Linux | pam RHEL 9 | 0:1.5.1-21.el9_5 | [RHSA-2024:11250](https://patchblox.com/security/data/fix/linux/rhsa-2024-11250.md) | Dec 17, 2024 | | Linux | pam almalinux 8 | 1.3.1-36.el8_10 | [ALSA-2024:10379](https://patchblox.com/security/data/fix/linux/alsa-2024-10379.md) | Nov 26, 2024 | | Linux | pam almalinux 9 | 1.5.1-21.el9_5 | [ALSA-2024:11250](https://patchblox.com/security/data/fix/linux/alsa-2024-11250.md) | Dec 17, 2024 | | Linux | pam amzn 2023 | 1.5.1-8.amzn2023.0.5 | [ALAS2023-2025-1132](https://patchblox.com/security/data/fix/linux/alas2023-2025-1132.md) | Jul 29, 2025 | | Linux | pam ol 8 | 0:1.3.1-36.0.1.el8_10 | [ELSA-2024-10379](https://patchblox.com/security/data/fix/linux/elsa-2024-10379.md) | Nov 26, 2024 | | Linux | pam ol 9 | 0:1.5.1-21.0.1.el9_5 | [ELSA-2024-11250](https://patchblox.com/security/data/fix/linux/elsa-2024-11250.md) | Dec 19, 2024 | | Linux | pam opensuse-leap 15.6 | 1.3.0-150000.6.86.1 | [SUSE-SU-2025:02970-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02970-1.md) | Aug 25, 2025 | | Linux | pam opensuse-leap 16.0 | 1.7.1-160000.3.1 | [OPENSUSE-SU-2026:20533-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20533-1.md) | Apr 14, 2026 | | Linux | pam rocky 8 | 0:1.3.1-36.el8_10 | [RLSA-2024:10379](https://patchblox.com/security/data/fix/linux/rlsa-2024-10379.md) | Dec 19, 2024 | | Linux | pam sles 15.6 | 1.3.0-150000.6.86.1 | [SUSE-SU-2025:02970-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02970-1.md) | Aug 25, 2025 | | Linux | pam sles 15.7 | 1.3.0-150000.6.86.1 | [SUSE-SU-2025:02970-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02970-1.md) | Aug 25, 2025 | | Linux | pam sles 16.0 | 1.7.1-160000.3.1 | [SUSE-SU-2026:21192-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-21192-1.md) | Apr 14, 2026 | | Linux | pam-debuginfo amzn 2023 | 1.5.1-8.amzn2023.0.5 | [ALAS2023-2025-1132](https://patchblox.com/security/data/fix/linux/alas2023-2025-1132.md) | Jul 29, 2025 | | Linux | pam-debugsource amzn 2023 | 1.5.1-8.amzn2023.0.5 | [ALAS2023-2025-1132](https://patchblox.com/security/data/fix/linux/alas2023-2025-1132.md) | Jul 29, 2025 | | Linux | pam-devel RHEL 8 | 0:1.3.1-36.el8_10 | [RHSA-2024:10379](https://patchblox.com/security/data/fix/linux/rhsa-2024-10379.md) | Nov 26, 2024 | | Linux | pam-devel RHEL 9 | 0:1.5.1-21.el9_5 | [RHSA-2024:11250](https://patchblox.com/security/data/fix/linux/rhsa-2024-11250.md) | Dec 17, 2024 | | Linux | pam-devel almalinux 8 | 1.3.1-36.el8_10 | [ALSA-2024:10379](https://patchblox.com/security/data/fix/linux/alsa-2024-10379.md) | Nov 26, 2024 | | Linux | pam-devel almalinux 9 | 1.5.1-21.el9_5 | [ALSA-2024:11250](https://patchblox.com/security/data/fix/linux/alsa-2024-11250.md) | Dec 17, 2024 | | Linux | pam-devel amzn 2023 | 1.5.1-8.amzn2023.0.5 | [ALAS2023-2025-1132](https://patchblox.com/security/data/fix/linux/alas2023-2025-1132.md) | Jul 29, 2025 | | Linux | pam-devel ol 8 | 0:1.3.1-36.0.1.el8_10 | [ELSA-2024-10379](https://patchblox.com/security/data/fix/linux/elsa-2024-10379.md) | Nov 26, 2024 | | Linux | pam-devel ol 9 | 0:1.5.1-21.0.1.el9_5 | [ELSA-2024-11250](https://patchblox.com/security/data/fix/linux/elsa-2024-11250.md) | Dec 19, 2024 | | Linux | pam-docs RHEL 9 | 0:1.5.1-21.el9_5 | [RHSA-2024:11250](https://patchblox.com/security/data/fix/linux/rhsa-2024-11250.md) | Dec 17, 2024 | | Linux | pam-docs almalinux 9 | 1.5.1-21.el9_5 | [ALSA-2024:11250](https://patchblox.com/security/data/fix/linux/alsa-2024-11250.md) | Dec 17, 2024 | | Linux | pam-docs amzn 2023 | 1.5.1-8.amzn2023.0.5 | [ALAS2023-2025-1132](https://patchblox.com/security/data/fix/linux/alas2023-2025-1132.md) | Jul 29, 2025 | | Linux | pam-docs ol 9 | 0:1.5.1-21.0.1.el9_5 | [ELSA-2024-11250](https://patchblox.com/security/data/fix/linux/elsa-2024-11250.md) | Dec 19, 2024 | | Linux | pam-full-src opensuse-leap 16.0 | 1.7.1-160000.3.1 | [OPENSUSE-SU-2026:20533-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20533-1.md) | Apr 14, 2026 | | Linux | pam-full-src sles 16.0 | 1.7.1-160000.3.1 | [SUSE-SU-2026:21192-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-21192-1.md) | Apr 14, 2026 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.