A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-docUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | May 13, 2022 | May 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.147-133.644 | Oct 26, 2022 | Aug 24, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade linux | Nov 1, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Apr 20, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perf | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perf | Apr 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel | Mar 29, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 3, 2022 | Mar 2, 2022 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Sep 16, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade bpftool | Mar 5, 2024 | Aug 24, 2022 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-vanillaUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-debug-baseUpgrade dtb-mediatekUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade dtb-apmUpgrade dtb-sprdUpgrade dtb-zteUpgrade dtb-alUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-macrosUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-preemptUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kselftests-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-preemptUpgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-develUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-baseUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-zfcpdump-manUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-vanilla-develUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-syms-azureUpgrade kernel-vanilla-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-devel | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency | Oct 1, 2022 | May 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub