A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-develUpgrade kernel-debug-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-doc | May 13, 2022 | May 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel | Oct 26, 2022 | Aug 24, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade linux | Nov 1, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Apr 20, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | Apr 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade perf | Mar 29, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 3, 2022 | Mar 2, 2022 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Sep 16, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade perfUpgrade kernel | Mar 5, 2024 | Aug 24, 2022 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-zteUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kselftests-kmp-preemptUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade dtb-alUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-vanillaUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade gfs2-kmp-preemptUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-preempt-extraUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-preemptUpgrade kernel-syms-azureUpgrade kernel-vanilla-baseUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-preempt-optionalUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade kernel-preempt-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-azure-baseUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-preempt-livepatch-develUpgrade dtb-caviumUpgrade kernel-zfcpdump-manUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-livepatch-devel | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenial | Oct 1, 2022 | May 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub