Skip to content
VulniPulse
Sign in
Critical9.1NetApp

Critical [CVE-2024-47685] Linux Kernel Vulnerability in NetApp Products

This critical-severity NetApp advisory covers CVE-2024-47685 affecting Active IQ Unified Manager for VMware vSphere, E-Series SANtricity OS Controller Software, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S.

NTAP-20250613-0011 Published Jun 13, 2025Updated by vendor Jul 23, 2026
CVE-2024-47685
Affected products & platforms
NetAppAFF / ASA / FASStorageGRIDSANtricityElement SoftwareSnapCenterActive IQ Unified ManagerONTAP tools for VMwareONTAP Select
Open vendor advisory

Android app · Google Play

Monitor future NetApp CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Multiple NetApp products incorporate Linux kernel. Certain versions of Linux kernels are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or Denial of Service (DoS).

Affected products: Active IQ Unified Manager for VMware vSphere, E-Series SANtricity OS Controller Software, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Compute Node (Bootstrap OS), NetApp SolidFire & HCI Management Node, NetApp SolidFire & HCI Storage Node (Element Software), ONTAP Select Deploy administration utility, ONTAP tools for VMware vSphere 10, SnapCenter Plug-in for VMware vSphere, StorageGRID (formerly StorageGRID Webscale), StorageGRID Baseboard Management Controller (BMC) - SG6060/SGF6024/SG100/SG1000, StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100.

Affected versions

No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions
  • Active IQ Unified Manager for VMware vSphere: 9.16P2
  • E-Series SANtricity OS Controller Software: 11.90R2
  • ONTAP tools for VMware vSphere 10: 10.4
  • SnapCenter Plug-in for VMware vSphere: 6.1
  • SnapCenter Plug-in for VMware vSphere: 6.2
  • StorageGRID (formerly StorageGRID Webscale): 11.9.0.7
  • StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100: 12.1

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Update affected NetApp products to a fixed release: Active IQ Unified Manager for VMware vSphere: 9.16P2, E-Series SANtricity OS Controller Software: 11.90R2, ONTAP tools for VMware vSphere 10: 10.4, SnapCenter Plug-in for VMware vSphere: 6.1, SnapCenter Plug-in for VMware vSphere: 6.2, StorageGRID (formerly StorageGRID Webscale): 11.9.0.7, StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100: 12.1.
  • NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • NetApp HCI Baseboard Management Controller (BMC) - H410C has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • NetApp HCI Compute Node (Bootstrap OS) has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • StorageGRID Baseboard Management Controller (BMC) - SG6060/SGF6024/SG100/SG1000 has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
Temporary workarounds
  • StorageGRID Baseboard Management Controller (BMC) - SG6060/SGF6024/SG100/SG1000 & StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100: <br> Block IPv6 traffic to the BMC, unplug the BMC network port, or implement external access controls such as ACLs or firewalls to limit access to only trusted users. <br><br> Reference documents for general BMC hardening guidance: <br> <a href="https://docs.netapp.com/us-en/storagegrid/harden/hardening-guidelines-for-storagegrid-nodes.html#guidelines-for-hardware-appliance-nodes">StorageGRID Hardening Guide</a> <br> <a href="https://media.defense.gov/2023/Jun/14/2003241405/-1/-1/0/CSI_HARDEN_BMCS.PDF">CISA Harden Baseboard Management Controllers</a>

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.