Published: 19/08/2020 Updated: 25/10/2022

CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.1 | Impact Score: 5.2 | Exploitability Score: 1.8

VMScore: 321

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N

In the Linux kernel prior to 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 18.04
canonical ubuntu linux 14.04
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04
opensuse leap 15.1
oracle sd-wan edge 8.2
starwindsoftware starwind virtual san v8

Synopsis Moderate: kernel security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for kernel is now available for Red Hat Enterprise Linux 77 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

CWE-732 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962254 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=22cf8419f1319ff87ec759d0ebdff4cbafaee832 https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.8 https://usn.ubuntu.com/4465-1/http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html https://security.netapp.com/advisory/ntap-20200904-0003/https://usn.ubuntu.com/4483-1/https://usn.ubuntu.com/4485-1/https://www.oracle.com/security-alerts/cpuApr2021.html https://www.starwindsoftware.com/security/sw-20210325-0004/https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2021:0526

CVE-2020-24394

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect