nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-devel | Dec 1, 2016 | Mar 24, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 25, 2009 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade iscsitarget-kmp-defaultUpgrade oracleasm-kmp-defaultUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-ppc64Upgrade kernel-xen-baseUpgrade ext4dev-kmp-vmiUpgrade kernel-vmiUpgrade ext4dev-kmp-paeUpgrade kernel-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-xenUpgrade kernel-sourceUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-syms | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.28-13-ixp4xxUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.28-13-iop32xUpgrade linux-image-2.6.28-13-genericUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.28-13-lpiaUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.28-13-imx51Upgrade linux-image-2.6.28-13-serverUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.28-13-versatileUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.28-13-virtualUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.27-14-server | Nov 8, 2024 | Mar 25, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Mar 25, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub