Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-42312

sysctl: always initialize i_uid/i_gid

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the sysfs core so set_ownership() can safely skip setting them. Commit 5ec27ec735ba ("fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes.") added defaults for i_uid/i_gid when set_ownership() was not implemented. It also missed adjusting net_ctl_set_ownership() to use the same default values in case the computation of a better value failed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to < b2591c89a6e2858796111138c38fcb6851aa1955affected
  • 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to < 34a86adea1f2b3c3f9d864c8cce09dca644601abaffected
  • 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to < 1deae34db9f4f8e0e03f891be2e2e15c15c8ac05affected
  • 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to < ffde3af4b29bf97d62d82e1d45275587e10a991aaffected
  • 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to < c7e2f43d182f5dde473389dbb39f16c9f0d64536affected
  • 5ec27ec735ba0477d48c80561cc5e856f0c5dfaf to < 98ca62ba9e2be5863c7d069f84f7166b45a5b2f4affected
  • e83234d7ef237931148b4b17834dadf57eb46c12affected
  • 2cbf2af144f0cd08a3361c6299b2e6086b7d21d9affected
  • 2c7b50c7b1d036f71acd9a917a8cb0f9b6e43dabaffected
  • 7eb45a94c279dd5af4cafaa738ae93737517eef4affected
  • 14cc90952cef94bfa89a6b4a2f55fd9a70f50a16affected
  • 4.9.187 to < 4.10affected
  • 4.14.135 to < 4.15affected
  • 4.19.61 to < 4.20affected
  • 5.1.20 to < 5.2affected
  • 5.2.3 to < 5.3affected

Linux Linux

Default version status: affected

  • 5.3affected
  • 0 to < 5.3unaffected
  • 5.10.224 to ≤ 5.10.*unaffected
  • 5.15.165 to ≤ 5.15.*unaffected
  • 6.1.104 to ≤ 6.1.*unaffected
  • 6.6.45 to ≤ 6.6.*unaffected
  • 6.10.3 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References