The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which allows local users to bypass file permissions by setting arbitrary ACLs, as demonstrated using setfacl.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-trace-baseUpgrade kernel-desktop-develUpgrade preload-kmp-defaultUpgrade preload-kmp-desktopUpgrade kernel-vanilla-baseUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-vanilla-develUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade kernel-desktop-baseUpgrade kernel-sourceUpgrade kernel-vanillaUpgrade kernel-xen-develUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade kernel-symsUpgrade kernel-desktopUpgrade kernel-default-develUpgrade kernel-paeUpgrade kernel-pae-base | Feb 17, 2015 | Jun 16, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.24-28-sparc64 | Nov 8, 2024 | Jun 16, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub