The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
CVSS Details
- CVSS 3.0 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Jan 30, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Feb 6, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Jan 30, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 4, 2018 | Jan 30, 2017 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2 | Jan 31, 2017 | Jan 30, 2017 |
| Ubuntu | — | Upgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-67-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-4.4.0-1051-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-67-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1009-awsUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-67-powerpc64-embUpgrade linux-image-4.4.0-67-generic-lpaeUpgrade linux-image-4.4.0-67-genericUpgrade linux-image-4.4.0-1006-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1048-raspi2Upgrade linux-image-4.4.0-67-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-67-powerpc-smpUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb | Mar 18, 2017 | Jan 30, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub