CVE-2024-36964

2024-06-0308:15:09

Debian Security Bug Tracker

security-tracker.debian.org

linux kernel

resolved

vulnerability

AI Score

6.5

Confidence

High

EPSS

Percentile

13.0%

JSON

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000’s perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 6.1.94-1linux_6.1.94-1_all.deb
Debian11alllinux< 5.10.218-1linux_5.10.218-1_all.deb
Debian999alllinux< 6.8.11-1linux_6.8.11-1_all.deb
Debian13alllinux< 6.8.11-1linux_6.8.11-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 6.1.94-1	linux_6.1.94-1_all.deb
Debian	11	all	linux	< 5.10.218-1	linux_5.10.218-1_all.deb
Debian	999	all	linux	< 6.8.11-1	linux_6.8.11-1_all.deb
Debian	13	all	linux	< 6.8.11-1	linux_6.8.11-1_all.deb