In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 19, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 21, 2020 | Aug 19, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | Nov 2, 2020 | Aug 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perf | Sep 29, 2020 | Aug 19, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Jun 5, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 21, 2020 | Aug 19, 2020 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-livepatch-5_3_18-22-defaultUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docs | Sep 4, 2020 | Aug 19, 2020 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.4Upgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1094-oemUpgrade linux-image-5.4.0-45-genericUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-5.3.0-1033-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.15.0-115-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-5.3.0-65-genericUpgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1022-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1023-azureUpgrade linux-image-gkeop-5.3Upgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1035-azureUpgrade linux-image-4.15.0-1093-azureUpgrade linux-image-4.15.0-1080-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-65-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-aws-edgeUpgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-azure-edgeUpgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1033-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem | Aug 23, 2020 | Aug 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub