In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 19, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 21, 2020 | Aug 19, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-devel | Nov 2, 2020 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-devel | Sep 29, 2020 | Aug 19, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Jun 5, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 21, 2020 | Aug 19, 2020 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-livepatch-5_3_18-22-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-default | Sep 4, 2020 | Aug 19, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-edgeUpgrade linux-image-gke-5.3Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1022-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-65-lowlatencyUpgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-gke-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1033-awsUpgrade linux-image-gkeop-5.3Upgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1023-azureUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-5.3.0-1035-azureUpgrade linux-image-4.15.0-1080-awsUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1093-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-virtualUpgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.3.0-65-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-5.3.0-1033-gkeUpgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-azureUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-115-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-5.4.0-45-genericUpgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-gke-4.15 | Aug 23, 2020 | Aug 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub