Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-26822

smb: client: set correct id, uid and cruid for multiuser automounts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the values from the parent mount.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c8117ac42303f7ae99bbe53e4952f7d147cca1fb to < 4a6e4c56721a3e6e2550b72ec56aab306c4607a7affected
  • 60e3318e3e900ba1ddfead937012b3432dfccc92 to < 2ceba8ae1bd1f5589548cb722a5c583ca3a2dedeaffected
  • 9fd29a5bae6e8f94b410374099a6fddb253d2d5f to < c2aa2718cda2d56b4a551cb40043e9abc9684626affected
  • 9fd29a5bae6e8f94b410374099a6fddb253d2d5f to < 7590ba9057c6d74c66f3b909a383ec47cd2f27fbaffected
  • 9fd29a5bae6e8f94b410374099a6fddb253d2d5f to < 4508ec17357094e2075f334948393ddedbb75157affected
  • 5.15.124 to < 5.15.201affected
  • 6.1.54 to < 6.1.164affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 5.15.201 to ≤ 5.15.*unaffected
  • 6.1.164 to ≤ 6.1.*unaffected
  • 6.6.18 to ≤ 6.6.*unaffected
  • 6.7.6 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References