CVE-2024-26822

2024-04-1710:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-26822

automounts

multiuser

smb

unix

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they’ll end up reusing the values from the parent mount.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux<= 6.1.94-1linux_6.1.94-1_all.deb
Debian11alllinux< 5.10.218-1linux_5.10.218-1_all.deb
Debian999alllinux< 6.7.7-1linux_6.7.7-1_all.deb
Debian13alllinux< 6.7.7-1linux_6.7.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	<= 6.1.94-1	linux_6.1.94-1_all.deb
Debian	11	all	linux	< 5.10.218-1	linux_5.10.218-1_all.deb
Debian	999	all	linux	< 6.7.7-1	linux_6.7.7-1_all.deb
Debian	13	all	linux	< 6.7.7-1	linux_6.7.7-1_all.deb