Vulnerability identifier: #VU93734

Vulnerability risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-36964

CWE-ID: CWE-269

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to read and manipulate data.

The vulnerability exists due to improperly imposed permissions within the p9mode2perm() function in fs/9p/vfs_inode.c. A local user can read and manipulate data.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/e90bc596a74bb905e0a45bf346038c3f9d1e868d
http://git.kernel.org/stable/c/df1962a199783ecd66734d563caf0fedecf08f96
http://git.kernel.org/stable/c/5a605930e19f451294bd838754f7d66c976a8a2c
http://git.kernel.org/stable/c/ad4f65328661392de74e3608bb736fedf3b67e32
http://git.kernel.org/stable/c/ca9b5c81f0c918c63d73d962ed8a8e231f840bc8
http://git.kernel.org/stable/c/e55c601af3b1223a84f9f27f9cdbd2af5e203bf3
http://git.kernel.org/stable/c/157d468e34fdd3cb1ddc07c2be32fb3b02826b02
http://git.kernel.org/stable/c/cd25e15e57e68a6b18dc9323047fe9c68b99290b
http://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.