CVE-2024-26822 smb: client: set correct id, uid and cruid for multiuser automounts

2024-04-1709:43:49

Linux

github.com

linux kernel

vulnerability

resolved

smb client

multiuser automounts

uid

gid

cruid

filesystem context

automounting

cve-2024-26822

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

smb: client: set correct id, uid and cruid for multiuser automounts

When uid, gid and cruid are not specified, we need to dynamically
set them into the filesystem context used for automounting otherwise
they’ll end up reusing the values from the parent mount.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/smb/client/namespace.c"
    ],
    "versions": [
      {
        "version": "9fd29a5bae6e",
        "lessThan": "c2aa2718cda2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9fd29a5bae6e",
        "lessThan": "7590ba9057c6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9fd29a5bae6e",
        "lessThan": "4508ec173570",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/smb/client/namespace.c"
    ],
    "versions": [
      {
        "version": "6.2",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.2",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.18",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.6",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]