The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
CVSS Details
- CVSS 3.0 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Jan 30, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Feb 6, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Jan 30, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 4, 2018 | Jan 30, 2017 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-docs | Jan 31, 2017 | Jan 30, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1009-awsUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-67-genericUpgrade linux-image-4.4.0-1006-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-67-generic-lpaeUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-4.4.0-1048-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-67-lowlatencyUpgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-4.4.0-67-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-67-powerpc-smpUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-4.4.0-1051-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-67-powerpc-e500mcUpgrade linux-image-4.4.0-67-powerpc64-smpUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-generic-lpae-lts-xenial | Mar 18, 2017 | Jan 30, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub