In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 19, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 21, 2020 | Aug 19, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-tools | Nov 2, 2020 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade bpftoolUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Sep 29, 2020 | Aug 19, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Jun 5, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 21, 2020 | Aug 19, 2020 |
| Suse | — | Upgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-livepatch-5_3_18-22-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docs | Sep 4, 2020 | Aug 19, 2020 |
| Ubuntu | — | Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-azure-edgeUpgrade linux-image-gkeop-5.3Upgrade linux-image-5.4.0-1023-azureUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-65-lowlatencyUpgrade linux-image-4.15.0-1080-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1022-awsUpgrade linux-image-4.15.0-1093-azureUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-5.3.0-1035-azureUpgrade linux-image-gke-5.3Upgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1033-awsUpgrade linux-image-aws-edgeUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-45-genericUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-5.3.0-65-genericUpgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-1033-gkeUpgrade linux-image-4.15.0-115-genericUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatency | Aug 23, 2020 | Aug 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub