← Back

CVE-2020-24394

nvd nist
Published: Aug 19, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.

Affected (13)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Opensuse: Leap · +2 more
Show all products
Linux: Linux Kernel · Canonical: Ubuntu Linux · Opensuse: Leap · Oracle: Sd Wan Edge · Starwindsoftware: Starwind Virtual San
Linux
1 product
Linux Kernel
Canonical
1 product
Ubuntu Linux
Opensuse
1 product
Leap
Oracle
1 product
Sd Wan Edge
Starwindsoftware
1 product
Starwind Virtual San
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
Before 5.7.8
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 20.04
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Leap
Version 15.1
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Sd Wan Edge
Version 8.2
Configuration E
6 vulnerable
Vulnerable SoftwareAffected Versions
Starwindsoftware
Starwind Virtual San
Version v8 build12533
Starwind Virtual San
Version v8 build12658
Starwind Virtual San
Version v8 build12859
Starwind Virtual San
Version v8 build13170
Starwind Virtual San
Version v8 build13586
Starwind Virtual San
Version v8 build13861

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (20)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.