The vulnerability of the Linux operating system, which allows a hacker to increase their privileges

The vulnerability of the simplesetacl function in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally, to increase their privileges during the execution of the setxattr command...

CVE-2017-5551

The simplesetacl function in fs/posixacl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOT...