Description
In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
45089142b1497dab2327d60f6c71c40766fc3ea4 to < e90bc596a74bb905e0a45bf346038c3f9d1e868daffected45089142b1497dab2327d60f6c71c40766fc3ea4 to < df1962a199783ecd66734d563caf0fedecf08f96affected45089142b1497dab2327d60f6c71c40766fc3ea4 to < 5a605930e19f451294bd838754f7d66c976a8a2caffected45089142b1497dab2327d60f6c71c40766fc3ea4 to < ad4f65328661392de74e3608bb736fedf3b67e32affected45089142b1497dab2327d60f6c71c40766fc3ea4 to < ca9b5c81f0c918c63d73d962ed8a8e231f840bc8affected45089142b1497dab2327d60f6c71c40766fc3ea4 to < e55c601af3b1223a84f9f27f9cdbd2af5e203bf3affected45089142b1497dab2327d60f6c71c40766fc3ea4 to < 157d468e34fdd3cb1ddc07c2be32fb3b02826b02affected45089142b1497dab2327d60f6c71c40766fc3ea4 to < cd25e15e57e68a6b18dc9323047fe9c68b99290baffected29a3e8657d2a2640384166e3fe29a086d235fc33affected3.0.5 to < 3.1affected
Linux Linux
Default version status: affected
3.1affected0 to < 3.1unaffected4.19.314 to ≤ 4.19.*unaffected5.4.276 to ≤ 5.4.*unaffected5.10.217 to ≤ 5.10.*unaffected5.15.159 to ≤ 5.15.*unaffected6.1.91 to ≤ 6.1.*unaffected6.6.31 to ≤ 6.6.*unaffected6.8.10 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/e90bc596a74bb905e0a45bf346038c3f9d1e868d ↗
- https://git.kernel.org/stable/c/df1962a199783ecd66734d563caf0fedecf08f96 ↗
- https://git.kernel.org/stable/c/5a605930e19f451294bd838754f7d66c976a8a2c ↗
- https://git.kernel.org/stable/c/ad4f65328661392de74e3608bb736fedf3b67e32 ↗
- https://git.kernel.org/stable/c/ca9b5c81f0c918c63d73d962ed8a8e231f840bc8 ↗
- https://git.kernel.org/stable/c/e55c601af3b1223a84f9f27f9cdbd2af5e203bf3 ↗
- https://git.kernel.org/stable/c/157d468e34fdd3cb1ddc07c2be32fb3b02826b02 ↗
- https://git.kernel.org/stable/c/cd25e15e57e68a6b18dc9323047fe9c68b99290b ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗