CVE-2024-26822

CVE-2024-26822

High · published April 17, 2024

CVSS v3.1
8.7
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb: client: set correct id, uid and cruid for multiuser automounts

When uid, gid and cruid are not specified, we need to dynamically

set them into the filesystem context used for automounting otherwise

they'll end up reusing the values from the parent mount.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Published
2024-04-17T14:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.2, < 6.6.186.6.18
linux/linux_kernel≥ 6.7, < 6.7.66.7.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
https://git.kernel.org/stable/c/2ceba8ae1bd1f5589548cb722a5c583ca3a2dede · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4508ec17357094e2075f334948393ddedbb75157 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4a6e4c56721a3e6e2550b72ec56aab306c4607a7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7590ba9057c6d74c66f3b909a383ec47cd2f27fb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c2aa2718cda2d56b4a551cb40043e9abc9684626 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4508ec17357094e2075f334948393ddedbb75157 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7590ba9057c6d74c66f3b909a383ec47cd2f27fb · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c2aa2718cda2d56b4a551cb40043e9abc9684626 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 APR 09:43Z
    smb: client: set correct id, uid and cruid for multiuser automounts
    cvelistv5