Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel NFS客户端实现MAY_EXEC权限检查漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 如果atomic_open可用的话，Linux kernel NFS客户端实现中fs/nfs/dir.c的nfs_permission函数没有检查执行(EXEC或MAY_EXEC)权限位，这允许本地用户绕过限制执行文件。
CVSS Information
N/A
Vulnerability Type
N/A