The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which allows local users to bypass file permissions by setting arbitrary ACLs, as demonstrated using setfacl.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-desktop-develUpgrade kernel-vanilla-develUpgrade kernel-debug-develUpgrade preload-kmp-desktopUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-defaultUpgrade kernel-trace-baseUpgrade kernel-source-vanillaUpgrade preload-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-symsUpgrade kernel-desktopUpgrade kernel-paeUpgrade kernel-desktop-baseUpgrade kernel-vanillaUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-trace | Feb 17, 2015 | Jun 16, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.32-24-server | Nov 8, 2024 | Jun 16, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub