Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
CVSS Details
- CVSS 3.1 Base Score: 3.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-xenUpgrade kernelUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-xen-devel | Dec 1, 2016 | Oct 3, 2012 |
| Debian | — | Upgrade ecryptfs-utils | Jul 30, 2024 | Oct 3, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Oct 3, 2012 |
| Suse | — | Upgrade kernel-vmiUpgrade kernel-vmi-baseUpgrade kernel-default-develUpgrade iscsitarget-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-rt-develUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-rtUpgrade kernel-vmi-develUpgrade kernel-ec2-baseUpgrade kernel-rtUpgrade kernel-debug-baseUpgrade kernel-symsUpgrade kernel-vanillaUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-sourceUpgrade ofed-kmp-rtUpgrade kernel-traceUpgrade kernel-xen-develUpgrade preload-kmp-desktopUpgrade kernel-source-vanillaUpgrade drbd-kmp-rtUpgrade kernel-desktopUpgrade kernel-rt_trace-baseUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-xen-baseUpgrade kernel-rt_trace-develUpgrade ecryptfs-utilsUpgrade cluster-network-kmp-rtUpgrade kernel-pae-develUpgrade cluster-network-kmp-rt_traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-pae-baseUpgrade kernel-debugUpgrade brocade-bna-kmp-rtUpgrade kernel-source-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-trace-baseUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-desktop-baseUpgrade preload-kmp-defaultUpgrade kernel-ec2-develUpgrade ecryptfs-utils-32bitUpgrade kernel-desktop-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-ec2-extraUpgrade kernel-paeUpgrade kernel-rt_trace | Feb 17, 2015 | Oct 3, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.38-12-serverUpgrade ecryptfs-utilsUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.32-35-386 | Nov 8, 2024 | Oct 3, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | Sep 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub