First published: Mon Feb 23 2015(Updated: )
A flaw was found in the way the Linux kernel's XFS file system handled replacing of remote attributes under certain conditions. A local user with access to XFS file system mount could potentially use this flaw to escalate their privileges on the system. Fixed by: <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59">http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59</a> Introduced by: <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e461fcb">http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e461fcb</a> Acknowledgements: Red Hat would like to thank Eric Windisch of the Docker project for reporting this issue.
Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel | <0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
redhat/kernel-rt | <1:3.10.0-229.rt56.144.el6 | 1:3.10.0-229.rt56.144.el6 |
Linux Linux kernel | <=3.14.5 | |
Linux Linux kernel | >=3.11<3.15 | |
debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 6.12.5-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.