Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
CVSS Details
- CVSS 3.1 Base Score: 3.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-doc | Dec 1, 2016 | Oct 3, 2012 |
| Debian | — | Upgrade ecryptfs-utils | Jul 30, 2024 | Oct 3, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Oct 3, 2012 |
| Suse | — | Upgrade ecryptfs-utilsUpgrade libecryptfs1Upgrade ecryptfs-utils-x86Upgrade ecryptfs-utils-develUpgrade ecryptfs-utils-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.32-419-doveUpgrade ecryptfs-utilsUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.32-35-sparc64 | Nov 8, 2024 | Oct 3, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.0 to build number 787047Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Sep 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub