In the Linux kernel, the following vulnerability has been resolved:
fs/9p: only translate RWX permissions for plain 9P2000
Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 9, 2024 | Jun 3, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-ec2Upgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-xenUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade kernel-trace-develUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-preemptUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-traceUpgrade kernel-ec2-develUpgrade kernel-ec2-baseUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-xen-baseUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-xen-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-macros | Jul 10, 2024 | Jun 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-204-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1178-awsUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-serverUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-3.13.0-204-genericUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-4.4.0-1141-aws | Aug 9, 2024 | Jun 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub