A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-debug-coreUpgrade bpftoolUpgrade perf | May 13, 2022 | May 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo | Oct 26, 2022 | Aug 24, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade linux | Nov 1, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Apr 20, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perf | Apr 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel | Mar 29, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 3, 2022 | Mar 2, 2022 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Sep 16, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-core | Mar 5, 2024 | Aug 24, 2022 |
| Suse | — | Upgrade kernel-kvmsmall-baseUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-preemptUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-preemptUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amdUpgrade ocfs2-kmp-preemptUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-preempt-optionalUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-vanilla-baseUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-rtUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade dtb-alUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-preemptUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade kernel-preempt-extraUpgrade kernel-default-manUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-obs-qaUpgrade gfs2-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade dtb-zteUpgrade kernel-docs | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-4.4.0-1151-aws | Oct 1, 2022 | May 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub