NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | Sep 22, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 22, 2009 |
| Suse | — | Upgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade ext4dev-kmp-xenUpgrade kernel-kdumpUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-xenUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-paeUpgrade kernel-xen-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-paeUpgrade oracleasm-kmp-defaultUpgrade kernel-vmiUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade kernel-default-man | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-itanium-smp | Nov 8, 2024 | Sep 22, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Sep 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub