Description
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator. The quotes '' are usually used in TuneD logs citing raw user input, so there will always be the ' character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned's D-Bus interface for such operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | tuned | 2.23.0 – < 2.24.1 | 2.24.1 |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tuned | 2.24.1-1 | — |
| Debian 13 | tuned | 2.24.1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | tuned | No fix yet | — |
| Ubuntu 26.04 LTS | tuned | No fix yet | — |
| Ubuntu 25.10 | tuned | No fix yet | — |
| Ubuntu 24.04 LTS | tuned | No fix yet | — |
| Ubuntu 22.04 LTS | tuned | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | tuned | No fix yet | — |
| Ubuntu 18.04 LTS | tuned | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | tuned +15 | 2.24.0-2.el9_5 | RHSA-2025:0879, RHSA-2024:10384 |
| RHEL 9 | tuned-profiles-compat +2 | 2.24.0-2.1.20240819gitc082797f.el9fdp | RHSA-2025:0879 |
| RHEL 8 | tuned +15 | 2.22.1-5.el8_10 | RHSA-2025:0880, RHSA-2024:11161 |
| RHEL 8 | tuned-ppd +2 | 2.24.0-2.1.20240819gitc082797f.el8fdp | RHSA-2025:0880 |
| RHEL 7 | tuned +13 | 2.11.0-5.el7fdp.2 | RHSA-2025:0881 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Sap Hana Els 7 | tuned-profiles-sap-hana | 2.11.0-13.el7_9 | RHSA-2024:10381 |
| Red Hat Rhel Extras Sap Els 7 | tuned-profiles-sap | 2.11.0-13.el7_9 | RHSA-2024:10381 |
| Red Hat Rhel Extras Rt Els 7 | tuned-profiles-realtime | 2.11.0-13.el7_9 | RHSA-2024:10381 |
| RHEL 9.4 EUS | tuned +14 | 2.22.1-3.el9_4 | RHSA-2025:1785 |
| RHEL 9.2 EUS | tuned +14 | 2.20.0-3.el9_2 | RHSA-2025:1802 |
| RHEL 8.8 EUS | tuned +15 | 2.20.0-2.el8_8.1 | RHSA-2025:0195 |
| RHEL 8.6 TUS | tuned +12 | 2.20.0-1.el8_6.2 | RHSA-2025:0368 |
| RHEL 8.6 E4S | tuned +14 | 2.20.0-1.el8_6.2 | RHSA-2025:0368 |
| RHEL 8.6 AUS | tuned +8 | 2.20.0-1.el8_6.2 | RHSA-2025:0368 |
| RHEL 8.4 TUS | tuned +12 | 2.20.0-1.el8_4.2 | RHSA-2025:0327 |
| RHEL 8.4 E4S | tuned +10 | 2.20.0-1.el8_4.2 | RHSA-2025:0327 |
| RHEL 8.4 AUS | tuned +8 | 2.20.0-1.el8_4.2 | RHSA-2025:0327 |
| RHEL 7 ELS | tuned +8 | 2.11.0-13.el7_9 | RHSA-2024:10381 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | tuned +10 | 2.24.0-2.el9_5.alma.1 | ALSA-2024:10384 |
| AlmaLinux 8 | tuned +10 | 2.22.1-5.el8_10 | ALSA-2024:11161 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | tuned | 2.24.0-2.el9_5 | RLSA-2024:10384 |
| Rocky Linux 8 | tuned | 2.22.1-5.el8_10 | RLSA-2024:11161 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | tuned | 2.24.1.0+git.90c24ee-1.1 | openSUSE-SU-2024:14605-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | tuned | 2.21.0-2 | — |
| Azure Linux 2 (CBL-Mariner) | tuned | 2.15.0-5 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | tuned +11 | 2.24.0-2.0.1.el9_5 | ELSA-2024-10384 |
| Oracle Linux 8 | tuned +11 | 2.22.1-5.0.1.el8_10 | ELSA-2024-11161 |
| Oracle Linux 7 | tuned +10 | 2.11.0-12.0.3.el7_9 | ELSA-2024-10381 |
Advisories 20
- ALSA-2024:10384 Important: tuned security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:11161 Moderate: tuned security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:1802 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:1785 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0881 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0879 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0880 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0368 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0327 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0195 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:11161 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:10381 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2024:10384 Red Hat Security Advisory: tuned security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RLSA-2024:10384 Important: tuned security update Rocky Linux Security Advisories · Feb 5, 2026
- openSUSE-SU-2024:14605-1 tuned-2.24.1.0+git.90c24ee-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RLSA-2024:11161 Moderate: tuned security update Rocky Linux Security Advisories · May 7, 2025
- WID-SEC-2024-3551 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 24, 2025
- ELSA-2024-11161 Moderate: tuned security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Dec 17, 2024
- ELSA-2024-10381 Moderate: tuned security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 16, 2024
- ELSA-2024-10384 Important: tuned security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 29, 2024
References
- RHSA-2024:10381 vendor-advisory
- RHSA-2024:10384 vendor-advisory
- RHSA-2024:11161 vendor-advisory
- RHSA-2025:0195 vendor-advisory
- RHSA-2025:0327 vendor-advisory
- RHSA-2025:0368 vendor-advisory
- RHSA-2025:0879 vendor-advisory
- RHSA-2025:0880 vendor-advisory
- RHSA-2025:0881 vendor-advisory
- RHSA-2025:1785 vendor-advisory
- RHSA-2025:1802 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-52337 vdb-entry
- RHBZ#2324541 issue-tracking
- https://github.com/redhat-performance/tuned/releases/tag/v2.24.1
- https://security.opensuse.org/2024/11/26/tuned-instance-create.html
- https://www.openwall.com/lists/oss-security/2024/11/28/1