The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
CVSS Details
- CVSS 3.0 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Jan 30, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Feb 6, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Jan 30, 2017 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 4, 2018 | Jan 30, 2017 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-default | Jan 31, 2017 | Jan 30, 2017 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1051-snapdragonUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-4.4.0-67-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-67-powerpc-e500mcUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1006-gkeUpgrade linux-image-4.4.0-67-powerpc64-embUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-4.4.0-1048-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1009-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-4.4.0-67-powerpc-smpUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-4.4.0-67-lowlatencyUpgrade linux-image-4.4.0-67-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-67-genericUpgrade linux-image-powerpc-smp | Mar 18, 2017 | Jan 30, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub