The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
CVSS Details
- CVSS 3.0 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Jan 30, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Feb 6, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Jan 30, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 4, 2018 | Jan 30, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default | Jan 31, 2017 | Jan 30, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1009-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-67-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1048-raspi2Upgrade linux-image-4.4.0-67-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-67-genericUpgrade linux-image-4.4.0-1006-gkeUpgrade linux-image-4.4.0-67-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-67-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-67-powerpc-e500mcUpgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-4.10.0-27-genericUpgrade linux-image-4.4.0-1051-snapdragonUpgrade linux-image-4.4.0-67-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.10.0-27-generic-lpae | Mar 18, 2017 | Jan 30, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub