In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 19, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Dec 21, 2020 | Aug 19, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-devel | Nov 2, 2020 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libs-devel | Sep 29, 2020 | Aug 19, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Jun 5, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 21, 2020 | Aug 19, 2020 |
| Suse | — | Upgrade kernel-azure-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-livepatch-5_3_18-22-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-default-extra | Sep 4, 2020 | Aug 19, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-5.4.0-45-genericUpgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.3.0-1033-gkeUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-awsUpgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-115-genericUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-65-genericUpgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-raspiUpgrade linux-image-gke-4.15Upgrade linux-image-azureUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1022-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-5.3.0-1035-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1080-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1093-azureUpgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1023-azureUpgrade linux-image-aws-edgeUpgrade linux-image-gkeop-5.3Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-65-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1033-awsUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-azure-edge | Aug 23, 2020 | Aug 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub