PT-2019-4755 · Linux+1 · Linux Kernel+1
Jann Horn
·
Publicado
2019-11-12
·
Atualizado
2020-05-01
·
CVE-2019-15793
CVSS v3.1
8.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 5.0 through 5.3
Description
The issue is related to the shiftfs component of the Linux kernel, which has inadequate access control. This could allow an attacker to elevate their privileges. A local attacker may exploit this to bypass discretionary access control permissions due to incorrect translation of user and group IDs in the lower filesystem. The IDs were being translated into init user ns instead of the intended s user ns for the lower filesystem, potentially leading to the use of unintended IDs.
Recommendations
For Linux kernel versions 5.0 through 5.3, consider applying a patch that corrects the translation of user and group IDs to the proper namespace for the lower filesystem. As a temporary workaround, restrict access to sensitive areas of the filesystem to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Incorrect Default Permissions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Ubuntu