Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during (1) inode creation or (2) ACL setting, which might allow local users to access restricted files or directories after a remount of a filesystem, related to "legacy modes" and an inconsistency between dentry permissions and inode permissions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel JFFS2文件系统不安全权限设置漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel中的JFFS2文件系统实现上存在漏洞，本地攻击者可能利用此漏洞非授权访问文件系统。 如果启用了POSIX ACL支持的话，Linux Kernel中所使用的JFFS2在创建inode或设置ACL期间没有正确地存储权限，这允许本地攻击者利用dentry权限和inode权限之间的不一致性在重新加载文件系统后访问受限制的文件或目
CVSS Information
N/A
Vulnerability Type
N/A