CVE-2024-36041
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1...
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
- Record
CVE-2024-36041- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-613
- Updated
- 2026-11-02
CVE List
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
- Record
CVE-2024-36041- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-613
- Updated
- 2026-11-02
EUVDEUVD-2024-35851
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
- Record
EUVD-2024-35851- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7xfq-9m67-9j5j
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1...
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
- Record
GHSA-7xfq-9m67-9j5j- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-613
- Updated
- 2026-11-02
OSVALPINE-CVE-2024-36041
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
- Record
ALPINE-CVE-2024-36041- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
- Record
CVE-2024-36041- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2024-36041
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
- Record
DEBIAN-CVE-2024-36041- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1937
plasma-workspace security update
Plasma 5 libraries and runtime components
Security Fix(es):
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.(CVE-2024-36041)
- Record
OESA-2024-1937- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-36041
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.
- Record
UBUNTU-CVE-2024-36041- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2024-0214 No score
Updated plasma-workspace packages fix security vulnerability
KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, allowing all local connections. This allows another user on the same machine to gain access to the session manager. A well crafted client could use the session restore feature to execute arbitrary code as the user on the next boot.
- Record
MGASA-2024-0214- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:0161-1 No score
Security update for plasma5-workspace
plasma5-workspace was updated to fix the following issue:
-
Fixed ksmserver authentication (CVE-2024-36041, boo#1225774).
-
Fixed a regression introduced by the preceding change (kde#487912, boo#1226110):
- Record
openSUSE-SU-2024:0161-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14018-1 No score
plasma6-session-6.0.5-2.1 on GA media
These are all security issues fixed in the plasma6-session-6.0.5-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14018-1- Updated
- 2026-11-02
OSVUSN-6843-1 No score
plasma-workspace vulnerability
Fabian Vogt discovered that Plasma Workspace incorrectly handled connections via ICE. A local attacker could possibly use this issue to gain access to another user's session manager and execute arbitrary code.
- Record
USN-6843-1- Updated
- 2026-11-02
OSVUSN-8829-1 No score
plasma-workspace vulnerability
Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as another user.
- Record
USN-8829-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
plasma-workspaceAlpine:v3.20 |
6.0.0.0 up to 6.0.5.1 | 6.0.5.1 |
plasma-workspaceAlpine:v3.21 |
6.0.0.0 up to 6.0.5.1 | 6.0.5.1 |
plasma-workspaceAlpine:v3.22 |
6.0.0.0 up to 6.0.5.1-r0 | 6.0.5.1-r0 |
plasma-workspaceAlpine:v3.23 |
6.0.0.0 up to 6.0.5.1-r0 | 6.0.5.1-r0 |
plasma-workspaceAlpine:v3.24 |
6.0.0.0 up to 6.0.5.1-r0 | 6.0.5.1-r0 |
plasma-workspaceDebian:12 |
before 4:5.27.5-2+deb12u2, plus listed versions 4:5.27.5-24:5.27.5-2+deb12u1 |
4:5.27.5-2+deb12u2 |
plasma-workspaceDebian:13 |
before 4:5.27.11.1-1 | 4:5.27.11.1-1 |
plasma-workspaceDebian:14 |
before 4:5.27.11.1-1 | 4:5.27.11.1-1 |
plasma-workspaceDebian:10 |
before 4:5.14.5.1-1+deb10u1, plus listed versions 4:5.14.5.1-1 |
4:5.14.5.1-1+deb10u1 |
plasma-workspaceDebian:11 |
before 4:5.20.5-6+deb11u1, plus listed versions 4:5.20.5-6 |
4:5.20.5-6+deb11u1 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
plasma-workspaceMageia:9 |
before 5.27.10-1.1.mga9 | 5.27.10-1.1.mga9 |
plasma-workspaceopenEuler:24.03-LTS |
before 5.27.10-2.oe2403 | 5.27.10-2.oe2403 |
plasma-workspaceUbuntu:Pro:16.04:LTS |
before 4:5.5.5.2-0ubuntu1.1+esm1, plus listed versions 4:5.4.2-0ubuntu14:5.4.3-0ubuntu14:5.5.4-0ubuntu14:5.5.5.2-0ubuntu14:5.5.5.2-0ubuntu1.1 |
4:5.5.5.2-0ubuntu1.1+esm1 |
plasma-workspaceUbuntu:18.04:LTS |
All versions, plus listed versions 4:5.10.5-0ubuntu14:5.10.5-0ubuntu24:5.11.4-0ubuntu14:5.11.5-0ubuntu34:5.12.0a-0ubuntu2 Show 11 moreShow less4:5.12.1-0ubuntu14:5.12.2-0ubuntu14:5.12.3-0ubuntu14:5.12.4-0ubuntu14:5.12.4-0ubuntu24:5.12.4-0ubuntu34:5.12.5-0ubuntu0.14:5.12.6-0ubuntu0.14:5.12.7-0ubuntu0.14:5.12.8-0ubuntu0.14:5.12.9-0ubuntu0.1 |
None known |
plasma-workspaceUbuntu:20.04:LTS |
before 4:5.18.8-0ubuntu0.2, plus listed versions 4:5.16.5-0ubuntu14:5.16.5-0ubuntu24:5.17.2-0ubuntu14:5.17.3-0ubuntu14:5.17.4-0ubuntu1 Show 13 moreShow less4:5.17.4-0ubuntu24:5.17.4-0ubuntu34:5.17.5-0ubuntu14:5.17.90-0ubuntu14:5.17.90-0ubuntu24:5.18.0a-0ubuntu14:5.18.1-0ubuntu14:5.18.2-0ubuntu24:5.18.3-0ubuntu14:5.18.3-0ubuntu24:5.18.4.1-0ubuntu14:5.18.5-0ubuntu0.14:5.18.8-0ubuntu0.1 |
4:5.18.8-0ubuntu0.2 |
plasma-workspaceUbuntu:22.04:LTS |
before 4:5.24.7-0ubuntu0.2, plus listed versions 4:5.22.5-0ubuntu14:5.23.0-0ubuntu14:5.23.2-0ubuntu14:5.23.3-0ubuntu14:5.23.4-0ubuntu1 Show 12 moreShow less4:5.23.4-0ubuntu24:5.23.5-0ubuntu14:5.23.90-0ubuntu14:5.23.90-0ubuntu24:5.24.0b-0ubuntu14:5.24.1-0ubuntu14:5.24.2-0ubuntu14:5.24.3-0ubuntu14:5.24.3-0ubuntu34:5.24.4-0ubuntu14:5.24.6-0ubuntu0.14:5.24.7-0ubuntu0.1 |
4:5.24.7-0ubuntu0.2 |
plasma-workspaceUbuntu:24.04:LTS |
before 4:5.27.11-0ubuntu4.1, plus listed versions 4:5.27.8-0ubuntu14:5.27.9.1-0ubuntu14:5.27.10-0ubuntu14:5.27.10-1ubuntu14:5.27.10-2ubuntu2 Show 4 moreShow less4:5.27.10-3ubuntu14:5.27.11-0ubuntu24:5.27.11-0ubuntu34:5.27.11-0ubuntu4 |
4:5.27.11-0ubuntu4.1 |
plasma5-workspaceSUSE:Package Hub 15 SP6 |
before 5.27.11-bp156.3.3.1 | 5.27.11-bp156.3.3.1 |
plasma5-workspaceopenSUSE:Leap 15.6 |
before 5.27.11-bp156.3.3.1 | 5.27.11-bp156.3.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-36041 is a high vulnerability (CVSS 7.8) in Kde Plasma-workspace, published June 3, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in plasma-workspace 6.0.5.1.
References
invent.kde.org/plasma/plasma-workspace
x.org/releases/X11R7.7/doc/libSM/xsmp.html
github.com/KDE/plasma-workspace/tags
kde.org/info/security/advisory-20240531-1.txt
lists.debian.org/debian-lts-announce/2024/06/msg00002.html
lists.fedoraproject.org/archives/list/[email protected]/message/43YGQJGB5I33UBRY2OHXTPXIEESZLZ6N
Show 17 moreShow less
nvd.nist.gov/vuln/detail/CVE-2024-36041
security.alpinelinux.org/vuln/CVE-2024-36041
security-tracker.debian.org/tracker/CVE-2024-36041
advisories.mageia.org/MGASA-2024-0214.html
bugs.mageia.org/show_bug.cgi?id=33272
openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1937
ubuntu.com/security/CVE-2024-36041
cve.org/CVERecord?id=CVE-2024-36041
lists.opensuse.org/archives/list/[email protected]/thread/VXFL4FV75KKEUKXI3LJ5OTFGTIP4IVYA
bugzilla.suse.com/1225774
suse.com/security/cve/CVE-2024-36041