Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-46695

Опубликовано: 13 сент. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 4.4

Описание

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inode_setsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesystem that is exported with root squashing enabled. The end of the kerneldoc comment for __vfs_setxattr_noperm() states: * This function requires the caller to lock the inode's i_mutex before it * is executed. It also assumes that the caller will make the appropriate * permission checks. nfsd_setattr() does do permissions checking via fh_verify() and nfsd_permission(), but those don't do all the same permissions checks that are done by security_inode_setxattr() and its related LSM hooks do. Since nfsd_setattr() is the only consumer of security_inode_setsecctx(), simplest solution appears to be to replace the call to __vfs_setxattr_noperm() with a call to __vfs_setxattr_locked(). This fixes the above issue and has the add...

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

6.14.0-15.15
esm-infra-legacy/trusty

ignored

ESM criteria, was needed
esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

ignored

ESM criteria, was needed
focal

ignored

end of standard support, was needed
jammy

released

5.15.0-127.137
noble

released

6.8.0-50.51
oracular

not-affected

6.11.0-7.7

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

end of kernel support
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

6.14.0-1005.5
esm-infra-legacy/trusty

ignored

ESM criteria, was needed
esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

ignored

ESM criteria, was needed
focal

ignored

end of standard support, was needed
jammy

released

5.15.0-1073.79
noble

released

6.8.0-1020.22
oracular

not-affected

6.11.0-1002.2

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-aws-5.3
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.13
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-aws-5.13]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.15
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-aws-5.15]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.15.0-1073.79~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-1073.79~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-aws-6.2
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-aws-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.11
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-aws-5.11]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-aws-6.5
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-aws-6.8
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

6.8.0-1020.22~22.04.1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

fips-preview/jammy

needed

fips-updates/bionic

needed

fips-updates/focal

needed

fips-updates/jammy

released

5.15.0-1073.79+fips1
fips-updates/xenial

DNE

fips/bionic

needed

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

ignored

ESM criteria, was needed
focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

6.14.0-1004.4
esm-infra-legacy/trusty

ignored

ESM criteria, was needed
esm-infra/bionic

ignored

superseded by linux-azure-5.3
esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

ignored

ESM criteria, was needed
focal

ignored

end of standard support, was needed
jammy

released

5.15.0-1078.87
noble

released

6.8.0-1020.23
oracular

not-affected

6.11.0-1003.3

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.13
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-azure-5.13]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.15
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-azure-5.15]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.15.0-1078.87~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-1078.87~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-azure-6.2
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-azure-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.11
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-azure-5.11]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.11.0-1008.8~24.04.1
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-azure-6.5
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-azure-6.8
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

6.8.0-1020.23~22.04.1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-azure-5.3
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-azure-fde-5.15
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-azure-fde-5.15]
jammy

needed

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

DNE

focal

ignored

end of standard support, was needed
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-azure-fde-6.2
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

replaced by linux-azure-6.5
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

fips-preview/jammy

needed

fips-updates/bionic

needed

fips-updates/focal

needed

fips-updates/jammy

released

5.15.0-1078.87+fips1
fips-updates/xenial

DNE

fips/bionic

needed

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.8.0-1013.14
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

bluefield/jammy

released

5.15.0-1057.59
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

DNE

focal

ignored

end of standard support, was needed
jammy

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

fips-preview/jammy

needed

fips-updates/bionic

needed

fips-updates/focal

needed

fips-updates/jammy

released

5.15.0-127.137+fips1
fips-updates/xenial

needed

fips/bionic

needed

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

6.14.0-1006.6
esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-gcp-5.3
esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

ignored

ESM criteria, was needed
focal

ignored

end of standard support, was needed
jammy

released

5.15.0-1072.80
noble

released

6.8.0-1019.21
oracular

not-affected

6.11.0-1001.1

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.13
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-gcp-5.13]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.15
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-gcp-5.15]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.15.0-1072.80~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-1072.80~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-gcp-6.2
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-gcp-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.11
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-gcp-5.11]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.11.0-1006.6~24.04.2
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-gcp-6.5
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-gcp-6.8
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

6.8.0-1019.21~22.04.1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

fips-preview/jammy

needed

fips-updates/bionic

needed

fips-updates/focal

needed

fips-updates/jammy

released

5.15.0-1072.80+fips1
fips-updates/xenial

DNE

fips/bionic

needed

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

end of kernel support
focal

ignored

end of kernel support
jammy

released

5.15.0-1070.76
noble

released

6.8.0-1015.19
oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-gke-5.0
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

end of kernel support
esm-infra/xenial

DNE

focal

ignored

end of kernel support
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

end of kernel support
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

end of kernel support, was needed
focal

ignored

end of kernel support, was needed
jammy

released

5.15.0-1056.63
noble

released

6.8.0-1002.4
oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

ignored

end of kernel support, was needed
esm-infra/xenial

DNE

focal

ignored

end of kernel support, was needed
jammy

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

end of kernel support
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

replaced by linux-hwe-5.4
esm-infra/focal

DNE

esm-infra/xenial

ignored

ESM criteria, was needed
focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.13
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-hwe-5.13]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.15
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-hwe-5.15]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.15.0-127.137~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-127.137~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-hwe-6.2
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.11
focal

ignored

end of standard support, was ignored [superseded by linux-hwe-5.11]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.11.0-19.19~24.04.1
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-hwe-6.5
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-hwe-6.8
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

6.8.0-50.51~22.04.1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-hwe-5.4
esm-infra/focal

DNE

esm-infra/xenial

ignored

superseded by linux-hwe
focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

DNE

focal

ignored

end of standard support, was needed
jammy

released

5.15.0-1066.69
noble

released

6.8.0-1017.17
oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

not-affected

5.15.0-1066.69~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-1066.69~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.8.0-1016.23
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

end of kernel support
focal

ignored

end of kernel support
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

released

5.15.0-1066.68
noble

DNE

oracular

DNE

plucky

DNE

realtime/jammy

released

5.15.0-1066.68
trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

5.15.0-1071.77
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.15.0-1071.77~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-1071.77~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

DNE

focal

ignored

end of standard support, was needed
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

ignored

ESM criteria, was needed
focal

ignored

end of standard support, was needed
jammy

released

5.15.0-1070.75
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

5.15.0-127.137
noble

released

6.8.0-50.51.1
oracular

not-affected

6.11.0-1002.2
plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.15.0-127.137~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-127.137~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.2
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.11.0-1011.12~24.04.1
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.5
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.8
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

6.8.0-50.51.1~22.04.1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

trusty

ignored

end of standard support, was needed

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

5.15.0-1068.69
noble

released

6.8.0-1019.21
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-nvidia-6.5
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-nvidia-6.8, was needed
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

6.8.0-1019.21~22.04.1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

released

6.8.0-1019.21.1
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

5.15.0-1032.32
noble

not-affected

6.8.0-1003.3
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

not-affected

5.15.0-1032.32~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-1032.32~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

5.15.0-1020.20
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

replaced by linux-hwe-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.13
focal

ignored

end of standard support, was ignored [superseded by linux-oem-5.13]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.14
focal

ignored

end of standard support, was ignored [superseded by linux-oem-5.14]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

replaced by linux-hwe-5.15
focal

ignored

end of standard support, was ignored [replaced by linux-hwe-5.15]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-oem-6.1
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.10
focal

ignored

end of standard support, was ignored [superseded by linux-oem-5.10]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-oem-6.1
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-oem-6.5
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.11.0-1007.7
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.14.0-1004.4
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-oem-6.8
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

released

6.8.0-1018.18
oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

6.14.0-1005.5
esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

ignored

ESM criteria, was needed
focal

ignored

end of standard support, was needed
jammy

released

5.15.0-1071.77
noble

released

6.8.0-1017.18
oracular

not-affected

6.11.0-1004.4

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-oracle-5.3
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.13
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-oracle-5.13]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.15
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-oracle-5.15]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.15.0-1071.77~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-1071.77~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

superseded by linux-oracle-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.11
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-oracle-5.11]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-oracle-6.8
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

6.8.0-1017.18~22.04.1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

6.14.0-1005.5
esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

ESM criteria, was needed
focal

ignored

end of standard support, was needed
jammy

released

5.15.0-1066.69
noble

released

6.8.0-1016.18
oracular

not-affected

6.11.0-1003.3
plucky

not-affected

6.11.0-1004.4
trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

ESM criteria, was needed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

released

6.8.0-2015.16
oracular

DNE

plucky

DNE

realtime/noble

released

6.8.0-2015.16
trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

replaced by linux-raspi
focal

ignored

end of standard support, was ignored [replaced by linux-raspi]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

6.14.0-1002.2
esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by Ubuntu Pro ppa version
noble

not-affected

6.8.1-1015.16
oracular

not-affected

6.11.0-1001.1
plucky

not-affected

6.11.0-1001.1
realtime/jammy

released

5.15.0-1074.82
realtime/noble

released

6.8.1-1013.14

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

6.14.0-13.13.2
esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.8
focal

ignored

end of standard support, was ignored [superseded by linux-riscv-5.8]
jammy

ignored

end of kernel support
noble

released

6.8.0-50.51.1
oracular

not-affected

6.11.0-8.8.1
plucky

not-affected

6.11.0-8.8.1
trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.13
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-riscv-5.13]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.15.0-1069.73~20.04.1
esm-infra/xenial

DNE

focal

released

5.15.0-1069.73~20.04.1
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

end of kernel support
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.11
esm-infra/xenial

DNE

focal

ignored

end of standard support, was ignored [superseded by linux-riscv-5.11]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-riscv-6.8
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

released

6.8.0-50.51.1~22.04.1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

end of kernel support
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

superseded by linux-starfive-6.5
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

ignored

end of kernel support
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

ESM criteria, was needed
esm-infra/xenial

DNE

focal

ignored

end of standard support, was needed
jammy

released

5.15.0-1039.43
noble

DNE

oracular

DNE

plucky

DNE

Показывать по

EPSS

Процентиль: 4%
0.0002
Низкий

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
redhat
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inode_setsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesystem that is exported with root squashing enabled. The end of the kerneldoc comment for __vfs_setxattr_noperm() states: * This function requires the caller to lock the inode's i_mutex before it * is executed. It also assumes that the caller will make the appropriate * permission checks. nfsd_setattr() does do permissions checking via fh_verify() and nfsd_permission(), but those don't do all the same permissions checks that are done by security_inode_setxattr() and its related LSM hooks do. Since nfsd_setattr() is the only consumer of security_inode_setsecctx(), simplest solution appears to be to replace the call to __vfs_setxattr_noperm() with a call to __vfs_setxattr_locked(). This fixes the above issue and has the added ben...

CVSS3: 4.4
nvd
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inode_setsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesystem that is exported with root squashing enabled. The end of the kerneldoc comment for __vfs_setxattr_noperm() states: * This function requires the caller to lock the inode's i_mutex before it * is executed. It also assumes that the caller will make the appropriate * permission checks. nfsd_setattr() does do permissions checking via fh_verify() and nfsd_permission(), but those don't do all the same permissions checks that are done by security_inode_setxattr() and its related LSM hooks do. Since nfsd_setattr() is the only consumer of security_inode_setsecctx(), simplest solution appears to be to replace the call to __vfs_setxattr_noperm() with a call to __vfs_setxattr_locked(). This fixes the above issue and has the add

CVSS3: 4.4
msrc
8 месяцев назад

Описание отсутствует

CVSS3: 4.4
debian
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: s ...

CVSS3: 4.4
github
9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inode_setsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesystem that is exported with root squashing enabled. The end of the kerneldoc comment for __vfs_setxattr_noperm() states: * This function requires the caller to lock the inode's i_mutex before it * is executed. It also assumes that the caller will make the appropriate * permission checks. nfsd_setattr() does do permissions checking via fh_verify() and nfsd_permission(), but those don't do all the same permissions checks that are done by security_inode_setxattr() and its related LSM hooks do. Since nfsd_setattr() is the only consumer of security_inode_setsecctx(), simplest solution appears to be to replace the call to __vfs_setxattr_noperm() with a call to __vfs_setxattr_locked(). This fixes the above issue and has the ...

EPSS

Процентиль: 4%
0.0002
Низкий

4.4 Medium

CVSS3

Уязвимость CVE-2024-46695