Lucene search

K
redhatcveRedhat.comRH:CVE-2020-24394
HistoryAug 19, 2020 - 3:09 p.m.

CVE-2020-24394

2020-08-1915:09:51
redhat.com
access.redhat.com
38

EPSS

0.001

Percentile

18.9%

A vulnerability was found in NFSv4.2 in the Linux kernel, where a server fails to correctly apply umask when creating a new object on filesystem without ACL support (for example, ext4 with the “noacl” mount option). This flaw allows a local attacker with a user privilege to cause a kernel information leak problem.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.