Description
In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class fchmodat2(), introduced in version 6.6 is currently not in the change attribute class of audit. Calling fchmodat2() to change a file attribute in the same fashion than chmod() or fchmodat() will bypass audit rules such as: -w /tmp/test -p rwa -k test_rwa The current patch adds fchmodat2() to the change attributes class.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
09da082b07bbae1c11d9560c8502800039aebcea to < 91e27bc79c3bca93c06bf5a471d47df9a35b3741affected09da082b07bbae1c11d9560c8502800039aebcea to < 3e762a03713e8c25ca0108c075d662c897fc0623affected09da082b07bbae1c11d9560c8502800039aebcea to < 4fed776ca86378da7dd743a7b648e20b025ba8efaffected09da082b07bbae1c11d9560c8502800039aebcea to < c4334c0d0e7d6f02ed93756fd4ba807e3d00c05faffected09da082b07bbae1c11d9560c8502800039aebcea to < 4f493a6079b588cf1f04ce5ed6cdad45ab0d53dcaffected
Linux Linux
Default version status: affected
6.6affected0 to < 6.6unaffected6.6.128 to ≤ 6.6.*unaffected6.12.75 to ≤ 6.12.*unaffected6.18.16 to ≤ 6.18.*unaffected6.19.6 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/91e27bc79c3bca93c06bf5a471d47df9a35b3741 ↗
- https://git.kernel.org/stable/c/3e762a03713e8c25ca0108c075d662c897fc0623 ↗
- https://git.kernel.org/stable/c/4fed776ca86378da7dd743a7b648e20b025ba8ef ↗
- https://git.kernel.org/stable/c/c4334c0d0e7d6f02ed93756fd4ba807e3d00c05f ↗
- https://git.kernel.org/stable/c/4f493a6079b588cf1f04ce5ed6cdad45ab0d53dc ↗
- https://www.bencteux.fr/posts/missing_syscalls_audit/ ↗