Описание
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | deferred | 2026-06-01 |
| esm-infra-legacy/trusty | deferred | 2026-06-01 |
| esm-infra-legacy/xenial | deferred | 2026-06-01 |
| esm-infra/bionic | deferred | 2026-06-01 |
| esm-infra/focal | deferred | 2026-06-01 |
| esm-infra/xenial | ignored | end of ESM support, was deferred |
| focal | ignored | end of standard support, was deferred |
| jammy | deferred | 2026-06-01 |
| kinetic | ignored | end of life, was deferred [2025-01-16] |
Показывать по
Ссылки на источники
EPSS
3.3 Low
CVSS3
Связанные уязвимости
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.
A flaw was found in the 9p passthrough filesystem (9pfs) implementatio ...
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.
EPSS
3.3 Low
CVSS3