A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-docUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules | May 13, 2022 | May 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python-perf | Oct 26, 2022 | Aug 24, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade linux | Nov 1, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Apr 20, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-devel | Apr 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade kernel-devel | Mar 29, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Mar 3, 2022 | Mar 2, 2022 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Sep 16, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-core | Mar 5, 2024 | Aug 24, 2022 |
| Suse | — | Upgrade dtb-amdUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-vanilla-baseUpgrade kernel-64kbUpgrade kernel-vanilla-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-preempt-optionalUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-azure-baseUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dlm-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade kernel-preempt-develUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade dtb-alteraUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-obs-qaUpgrade gfs2-kmp-preemptUpgrade dtb-zteUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kselftests-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-preempt-extraUpgrade dtb-amlogicUpgrade kernel-debug-baseUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dtb-alUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-preemptUpgrade kernel-vanillaUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-default-manUpgrade kernel-azure-devel | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-virtual | Oct 1, 2022 | May 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub