In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 19, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 21, 2020 | Aug 19, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-devel | Nov 2, 2020 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-headers | Sep 29, 2020 | Aug 19, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Jun 5, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 21, 2020 | Aug 19, 2020 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-livepatch-5_3_18-22-defaultUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-docs | Sep 4, 2020 | Aug 19, 2020 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-5.3.0-65-genericUpgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-4.15.0-115-genericUpgrade linux-image-gke-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-5.3.0-1033-gkeUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-5.4.0-45-genericUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1080-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1093-azureUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1035-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1022-awsUpgrade linux-image-azure-edgeUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-5.3.0-1033-awsUpgrade linux-image-5.3.0-65-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-snapdragonUpgrade linux-image-gke-5.3Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1023-azureUpgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-aws-edgeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.3Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-5.4.0-45-lowlatency | Aug 23, 2020 | Aug 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub