CVE-2009-1072

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create…

published March 25, 2009

CVSS
—
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Published
2009-03-25T01:00Z
EPSS history
Timeline
  • 25 MAR 01:00Z
    nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create…
    cvelistv5