CVE-2024-36964 fs/9p: only translate RWX permissions for plain 9P2000
Attackers can exploit improper permission handling in the 9P filesystem to set SUID bits, potentially leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-36964?
CVE-2024-36964 is a high-severity vulnerability in Debian Debian Linux, published on 3 Jun 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
In the Linux kernel, the following vulnerability has been resolved:
fs/9p: only translate RWX permissions for plain 9P2000
Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.
Which versions are affected by CVE-2024-36964?
It affects 2 products.
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2024-36964?
Apply the vendor's patch.
Is CVE-2024-36964 being exploited?
There is no known exploitation of CVE-2024-36964 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as BELL-CVE-2024-36964, DEBIAN-CVE-2024-36964, GHSA-m7gw-975p-jwfj, UBUNTU-CVE-2024-36964.