# CVE-2024-36041: libcolorcorrect5: KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1and 6.x before 6.0.5.1 allows connections vi...

CVE-2024-36041 is fixed in 20 products on 1 platform, first by libcolorcorrect5 4:5.18.8-0ubuntu0.2, released June 2, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-36041
- Priority: High
- CVSS: 7.8 (Medium)
- EPSS: 0.0030
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 2, 2024

## Description

KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1and 6.x before 6.0.5.1 allows connections via ICE based purely on the host,i.e., all local connections are accepted. This allows another user on thesame machine to gain access to the session manager, e.g., use thesession-restore feature to execute arbitrary code as the victim (on thenext boot) via earlier use of the /tmp directory.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libbatterycontrol6 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libbatterycontrol6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libbatterycontrol6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libcolorcorrect5 Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [libcolorcorrect5 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libcolorcorrect5-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libcolorcorrect5 Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [libcolorcorrect5 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libcolorcorrect5-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libcolorcorrect5 Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [libcolorcorrect5 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libcolorcorrect5-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | libcolorcorrect5 Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [libcolorcorrect5 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libcolorcorrect5-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libcolorcorrect6 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libcolorcorrect6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libcolorcorrect6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libkfontinst5 Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [libkfontinst5 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libkfontinst5-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libkfontinst5 Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [libkfontinst5 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libkfontinst5-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | libkfontinst5 Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [libkfontinst5 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libkfontinst5-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libkfontinst6 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libkfontinst6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libkfontinst6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libkfontinstui5 Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [libkfontinstui5 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libkfontinstui5-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libkfontinstui5 Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [libkfontinstui5 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libkfontinstui5-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | libkfontinstui5 Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [libkfontinstui5 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libkfontinstui5-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libkfontinstui6 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libkfontinstui6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libkfontinstui6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libkmpris6 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libkmpris6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libkmpris6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libkworkspace5-5 Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [libkworkspace5-5 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libkworkspace5-5-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libkworkspace5-5 Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [libkworkspace5-5 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libkworkspace5-5-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libkworkspace5-5 Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [libkworkspace5-5 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libkworkspace5-5-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | libkworkspace5-5 Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [libkworkspace5-5 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libkworkspace5-5-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libkworkspace6-6 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libkworkspace6-6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libkworkspace6-6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libnotificationmanager1 Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [libnotificationmanager1 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnotificationmanager1-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libnotificationmanager1 Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [libnotificationmanager1 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnotificationmanager1-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libnotificationmanager1 Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [libnotificationmanager1 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libnotificationmanager1-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | libnotificationmanager1 Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [libnotificationmanager1 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libnotificationmanager1-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libnotificationmanager1 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libnotificationmanager1 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libnotificationmanager1-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libplasma-geolocation-interface5 Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [libplasma-geolocation-interface5 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libplasma-geolocation-interface5-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libplasma-geolocation-interface5 Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [libplasma-geolocation-interface5 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libplasma-geolocation-interface5-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libplasma-geolocation-interface5 Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [libplasma-geolocation-interface5 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libplasma-geolocation-interface5-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | libplasma-geolocation-interface5 Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [libplasma-geolocation-interface5 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libplasma-geolocation-interface5-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libplasma-geolocation-interface6 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libplasma-geolocation-interface6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libplasma-geolocation-interface6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libtaskmanager6 Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [libtaskmanager6 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtaskmanager6-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libtaskmanager6 Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [libtaskmanager6 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtaskmanager6-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libtaskmanager6 Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [libtaskmanager6 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtaskmanager6-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | libtaskmanager6 Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [libtaskmanager6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libtaskmanager6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libtaskmanager6 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libtaskmanager6 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libtaskmanager6-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libweather-ion7 Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [libweather-ion7 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libweather-ion7-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libweather-ion7 Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [libweather-ion7 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libweather-ion7-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | libweather-ion7 Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [libweather-ion7 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libweather-ion7-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | libweather-ion7 Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [libweather-ion7 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libweather-ion7-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | libweather-ion7 Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [libweather-ion7 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libweather-ion7-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | plasma-workspace Debian 11.6 (bullseye) | 4:5.20.5-6+deb11u1 | [DSA-5723-1](https://patchblox.com/security/data/fix/linux/dsa-5723-1.md) | Jun 27, 2024 |
| Linux | plasma-workspace Debian 12.15 (bookworm) | 4:5.27.5-2+deb12u2 | [DSA-5723-1](https://patchblox.com/security/data/fix/linux/dsa-5723-1.md) | Jun 27, 2024 |
| Linux | plasma-workspace Debian 13.5 (trixie) | 4:5.27.11.1-1 | [DEBIAN-CVE-2024-36041](https://patchblox.com/security/data/fix/linux/debian-cve-2024-36041.md) | Jul 5, 2024 |
| Linux | plasma-workspace Debian 14 | 4:5.27.11.1-1 | [DEBIAN-CVE-2024-36041](https://patchblox.com/security/data/fix/linux/debian-cve-2024-36041.md) | Jul 5, 2024 |
| Linux | plasma-workspace Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [plasma-workspace 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-plasma-workspace-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | plasma-workspace Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [plasma-workspace 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-plasma-workspace-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | plasma-workspace Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [plasma-workspace 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-plasma-workspace-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | plasma-workspace Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [plasma-workspace 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-plasma-workspace-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | plasma-workspace Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [plasma-workspace 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-plasma-workspace-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | plasma-workspace-data Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [plasma-workspace-data 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-plasma-workspace-data-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | plasma-workspace-data Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [plasma-workspace-data 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-plasma-workspace-data-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | plasma-workspace-data Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [plasma-workspace-data 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-plasma-workspace-data-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | plasma-workspace-data Ubuntu 25.04 (plucky) | 4:5.27.11.1-0ubuntu1 | [plasma-workspace-data 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-plasma-workspace-data-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | plasma-workspace-wayland Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [plasma-workspace-wayland 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-plasma-workspace-wayland-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | plasma-workspace-wayland Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [plasma-workspace-wayland 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-plasma-workspace-wayland-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | plasma-workspace-wayland Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [plasma-workspace-wayland 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-plasma-workspace-wayland-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | plasma-workspace-wayland Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [plasma-workspace-wayland 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-plasma-workspace-wayland-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |
| Linux | plasma5-workspace opensuse-leap 15.6 | 5.27.11-bp156.3.3.1 | [OPENSUSE-SU-2024:0161-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2024-0161-1.md) | Jun 13, 2024 |
| Linux | sddm-theme-breeze Ubuntu 20.04 LTS (focal) | 4:5.18.8-0ubuntu0.2 | [sddm-theme-breeze 4:5.18.8-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-sddm-theme-breeze-4-5.18.8-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | sddm-theme-breeze Ubuntu 22.04.1 LTS (jammy) | 4:5.24.7-0ubuntu0.2 | [sddm-theme-breeze 4:5.24.7-0ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sddm-theme-breeze-4-5.24.7-0ubuntu0.2.md) | Jun 2, 2024 |
| Linux | sddm-theme-breeze Ubuntu 24.04.5 LTS (noble) | 4:5.27.11-0ubuntu4.1 | [sddm-theme-breeze 4:5.27.11-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-sddm-theme-breeze-4-5.27.11-0ubuntu4.1.md) | Jun 2, 2024 |
| Linux | sddm-theme-breeze Ubuntu 24.10 (oracular) | 4:5.27.11.1-0ubuntu1 | [sddm-theme-breeze 4:5.27.11.1-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-sddm-theme-breeze-4-5.27.11.1-0ubuntu1.md) | Jun 3, 2024 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.