CVE-2020-24394

Katalog CVE

CVSS 7.1 · High EPSS 0,36%

Kerentanan Incorrect Permission Assignment for Critical Resource pada linux kernel, canonical ubuntu linux +3 lainnya. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.

Rincian

Terbit di NVD

19 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 28,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.8 release notes · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=22cf8419f1319ff87ec759d0ebdff4cb... patch · advisory vendor
• https://www.oracle.com/security-alerts/cpuApr2021.html patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html advisory pihak ketiga
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962254 issue tracking · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200904-0003/ advisory pihak ketiga
• https://usn.ubuntu.com/4465-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4483-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4485-1/ advisory pihak ketiga
• https://www.starwindsoftware.com/security/sw-20210325-0004/ advisory pihak ketiga