A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-doc | May 13, 2022 | May 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perf-debuginfo | Oct 26, 2022 | Aug 24, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | May 10, 2022 |
| Debian | — | Upgrade linux | Nov 1, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Apr 20, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Apr 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools | Mar 29, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 3, 2022 | Mar 2, 2022 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Sep 16, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | May 10, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-devel | Mar 5, 2024 | Aug 24, 2022 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-preempt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-zfcpdump-manUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade ocfs2-kmp-preemptUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-preempt-optionalUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-azure-baseUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-develUpgrade dlm-kmp-preemptUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade dtb-zteUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dtb-alUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-preemptUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-extraUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-vanillaUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-debug-baseUpgrade dtb-rockchipUpgrade gfs2-kmp-preemptUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-64kb-devel | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-virtual | Oct 1, 2022 | May 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub