Improper Access Control Affecting kernel-rt-debug-kvm package, versions <0:4.18.0-372.9.1.rt7.166.el8
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-CENTOS8-KERNELRTDEBUGKVM-1933523
- published 1 Dec 2021
- disclosed 16 Sep 2021
Introduced: 16 Sep 2021
CVE-2021-4037 Open this link in a new tabHow to fix?
Upgrade Centos:8 kernel-rt-debug-kvm to version 0:4.18.0-372.9.1.rt7.166.el8 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream kernel-rt-debug-kvm package and not the kernel-rt-debug-kvm package as distributed by Centos.
See How to fix? for Centos:8 relevant fixed versions and status.
A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.
References
- https://access.redhat.com/security/cve/CVE-2021-4037
- https://access.redhat.com/errata/RHSA-2022:1975
- https://bugzilla.redhat.com/show_bug.cgi?id=2004810
- https://bugzilla.redhat.com/show_bug.cgi?id=2027239
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=01ea173e103e
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
- https://www.debian.org/security/2022/dsa-5257