The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xenUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-PAE-devel | Dec 1, 2016 | May 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 14, 2009 |
| Suse | — | Upgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-default-baseUpgrade ext4dev-kmp-paeUpgrade kernel-xenUpgrade ext4dev-kmp-ppc64Upgrade kernel-pae-baseUpgrade kernel-paeUpgrade kernel-vmiUpgrade kernel-default-manUpgrade iscsitarget-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-xen-baseUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-symsUpgrade oracleasm-kmp-defaultUpgrade kernel-kdump | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.28-13-imx51Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.28-13-iop32xUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.28-13-virtualUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.28-13-versatileUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.28-13-ixp4xxUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.28-13-lpiaUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.28-13-serverUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.28-13-genericUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-rt | Nov 8, 2024 | May 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | May 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub