In the Linux kernel, the following vulnerability has been resolved:
fs/9p: only translate RWX permissions for plain 9P2000
Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | Jun 3, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-xen-baseUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade dtb-armUpgrade kernel-ec2-develUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade kernel-xen-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-ec2Upgrade kernel-azure-extraUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-preemptUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-traceUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-debugUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatch | Jul 10, 2024 | Jun 3, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-3.13.0-204-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-genericUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-4.4.0-1179-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1178-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-3.13.0-204-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-serverUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8 | Aug 9, 2024 | Jun 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub