Azure Linux 3.0 Security Update: kernel (CVE-2024-46695)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46695 advisory. - In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions...

kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook

A flaw was found in the Linux kernel. A highly privileged user on a Network File System NFS client can bypass intended security restrictions and modify security labels on files located on an NFS filesystem. This issue occurs even when root squashing, a security feature designed to limit root user...