The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on an NFS filesystem and then changing this file's permissions, a related issue to CVE-2010-0727.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-s390-debugUpgrade um-host-kernelUpgrade kernel-64k-pagesizeUpgrade kernel-s390x-debugUpgrade um-host-install-initrdUpgrade xen-kmpUpgrade kernel-smpUpgrade kernel-s390xUpgrade kernel-pseries64Upgrade kernel-bigsmpUpgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-xenUpgrade kernel-s390Upgrade kernel-sn2Upgrade kernel-default | Feb 17, 2015 | Mar 16, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub