CVE-2016-1237

MEDIUM

Linux kernel <4.6.3 - Privilege Escalation

Title source: llm

Description

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c.

References (11)

[Vendor Advisory] http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=999653786df6954a31044528ac3f7a5dadca08f4

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91456

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3053-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3070-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3070-2

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3070-3

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3070-4

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=1350845

[Vendor Advisory] https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4

[Third Party Advisory] http://www.debian.org/security/2016/dsa-3607

[Mailing List] http://www.openwall.com/lists/oss-security/2016/06/25/2

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 3.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-284

Status draft

Affected Products (1)

linux/linux_kernel < 4.6.3

Timeline

Published Jun 29, 2016

Tracked Since Feb 18, 2026