The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-xen-devel | Dec 1, 2016 | Jun 1, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 1, 2010 |
| Suse | — | Upgrade kernel-ppc64-baseUpgrade kernel-trace-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-default-extraUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-macrosUpgrade ext4dev-kmp-ppc64Upgrade ext4dev-kmp-vmiUpgrade reiserfs-kmp-defaultUpgrade kernel-kdumpUpgrade kernel-paeUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-ppc64-develUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-zfcpdumpUpgrade kernel-ppc64Upgrade ext4dev-kmp-xenUpgrade kernel-vmiUpgrade oracleasm-kmp-defaultUpgrade kernel-sourceUpgrade kernel-vanilla-baseUpgrade kernel-traceUpgrade kernel-xen-develUpgrade ext4dev-kmp-defaultUpgrade kernel-vmi-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-develUpgrade kernel-default-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-24-386 | Nov 8, 2024 | Jun 1, 2010 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.1 to build number 348481Upgrade VMware ESX 4.0 to build number 360236 | Feb 16, 2011 | Jun 1, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub