NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-PAE | Dec 1, 2016 | Sep 22, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 22, 2009 |
| Suse | — | Upgrade nouveau-kmp-debugUpgrade ib-bonding-kmp-rt_debugUpgrade kernel-kdumpUpgrade vmware-kmp-debugUpgrade virtualbox-ose-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade appleir-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade kernel-ppc64Upgrade kernel-docsUpgrade ofed-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade aufs-kmp-debugUpgrade kernel-debug-extraUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade ofedUpgrade gspcav-kmp-debugUpgrade kernel-trace-baseUpgrade kernel-ps3Upgrade atl2-kmp-debugUpgrade kernel-pae-extraUpgrade kernel-rt_timingUpgrade kernel-trace-extraUpgrade iscsitarget-kmp-debugUpgrade omnibook-kmp-debugUpgrade kernel-traceUpgrade acerhk-kmp-debugUpgrade ib-bonding-kmp-rt_bigsmpUpgrade ib-bonding-kmp-rt_timingUpgrade drbd-kmp-debugUpgrade slert-releaseUpgrade kernel-ppc64-extraUpgrade kernel-default-extraUpgrade kernel-debugUpgrade ofed-kmp-rt_bigsmpUpgrade pcc-acpi-kmp-debugUpgrade kernel-xen-extraUpgrade kernel-xenUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade kqemu-kmp-debugUpgrade ivtv-kmp-debugUpgrade ofed-kmp-rt_debugUpgrade pcfclock-kmp-debugUpgrade kernel-ppc64-baseUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-debug-baseUpgrade dazuko-kmp-debugUpgrade kernel-symsUpgrade acx-kmp-debugUpgrade kernel-vanillaUpgrade kernel-rt_debugUpgrade uvcvideo-kmp-debugUpgrade kernel-rt_bigsmpUpgrade at76_usb-kmp-debugUpgrade kernel-rtUpgrade tpctl-kmp-debugUpgrade kernel-pae-baseUpgrade ofed-kmp-rt_timingUpgrade ofed-docUpgrade ib-bonding-kmp-rtUpgrade kernel-sourceUpgrade wlan-ng-kmp-debug | Feb 17, 2015 | Sep 22, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.27-15-generic | Nov 8, 2024 | Sep 22, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Sep 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub