AZL-56078 CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3
When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...