CVE-2011-1833: Race Condition
Last updated 24 July 2024
Other sources
Race condition in the ecryptfsmount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfsprivate mount with a mismatched uid.
— Launchpad
Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested source directory. A local attacker could use this flaw to mount an arbitrary directory, possibly leading to information disclosure.
Upstream fix: 764355487ea220fdc2faf128d577d7f679b91f97
References: https://bugs.launchpad.net/ecryptfs/+bug/732628
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1833?
CVE-2011-1833 has a medium severity rating due to the potential for local users to bypass file permissions.
How do I fix CVE-2011-1833?
To remediate CVE-2011-1833, upgrade your Linux kernel to version 3.1 or later.
What systems are affected by CVE-2011-1833?
CVE-2011-1833 affects various versions of the Linux kernel prior to 3.1, including 3.0.44 and earlier, as well as specific ecryptfs-utils packages on Debian.
Who reported CVE-2011-1833?
CVE-2011-1833 was reported by Vasiliy Kulikov of Openwall.
What type of vulnerability is CVE-2011-1833?
CVE-2011-1833 is a race condition vulnerability that can allow local users to bypass file permissions.