In the Linux kernel, the following vulnerability has been resolved:
fs/9p: only translate RWX permissions for plain 9P2000
Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.
{ "vanir_signatures": [ { "id": "CVE-2024-36964-0bf9361d", "signature_type": "Line", "target": { "file": "fs/9p/vfs_inode.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "198169395294130070620086574575023489993", "304705699618550391414350675235277136037", "263443730846894185391680059464074157021", "35592413756734472360494288092271288922" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e55c601af3b1223a84f9f27f9cdbd2af5e203bf3" }, { "id": "CVE-2024-36964-2a5609a9", "signature_type": "Function", "target": { "file": "fs/9p/vfs_inode.c", "function": "p9mode2perm" }, "signature_version": "v1", "digest": { "length": 348.0, "function_hash": "107230241424430618610593410912773329540" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@157d468e34fdd3cb1ddc07c2be32fb3b02826b02" }, { "id": "CVE-2024-36964-320a9b71", "signature_type": "Function", "target": { "file": "fs/9p/vfs_inode.c", "function": "p9mode2perm" }, "signature_version": "v1", "digest": { "length": 348.0, "function_hash": "107230241424430618610593410912773329540" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd25e15e57e68a6b18dc9323047fe9c68b99290b" }, { "id": "CVE-2024-36964-37e170a5", "signature_type": "Function", "target": { "file": "fs/9p/vfs_inode.c", "function": "p9mode2perm" }, "signature_version": "v1", "digest": { "length": 348.0, "function_hash": "107230241424430618610593410912773329540" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e55c601af3b1223a84f9f27f9cdbd2af5e203bf3" }, { "id": "CVE-2024-36964-3e32c797", "signature_type": "Line", "target": { "file": "fs/9p/vfs_inode.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "198169395294130070620086574575023489993", "304705699618550391414350675235277136037", "263443730846894185391680059464074157021", "35592413756734472360494288092271288922" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca9b5c81f0c918c63d73d962ed8a8e231f840bc8" }, { "id": "CVE-2024-36964-500b79f3", "signature_type": "Function", "target": { "file": "fs/9p/vfs_inode.c", "function": "p9mode2perm" }, "signature_version": "v1", "digest": { "length": 348.0, "function_hash": "107230241424430618610593410912773329540" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a605930e19f451294bd838754f7d66c976a8a2c" }, { "id": "CVE-2024-36964-54412b97", "signature_type": "Line", "target": { "file": "fs/9p/vfs_inode.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "198169395294130070620086574575023489993", "304705699618550391414350675235277136037", "263443730846894185391680059464074157021", "35592413756734472360494288092271288922" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@157d468e34fdd3cb1ddc07c2be32fb3b02826b02" }, { "id": "CVE-2024-36964-5cea622e", "signature_type": "Line", "target": { "file": "fs/9p/vfs_inode.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "198169395294130070620086574575023489993", "304705699618550391414350675235277136037", "263443730846894185391680059464074157021", "35592413756734472360494288092271288922" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad4f65328661392de74e3608bb736fedf3b67e32" }, { "id": "CVE-2024-36964-5e446540", "signature_type": "Function", "target": { "file": "fs/9p/vfs_inode.c", "function": "p9mode2perm" }, "signature_version": "v1", "digest": { "length": 348.0, "function_hash": "107230241424430618610593410912773329540" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e90bc596a74bb905e0a45bf346038c3f9d1e868d" }, { "id": "CVE-2024-36964-66258d0a", "signature_type": "Function", "target": { "file": "fs/9p/vfs_inode.c", "function": "p9mode2perm" }, "signature_version": "v1", "digest": { "length": 348.0, "function_hash": "107230241424430618610593410912773329540" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca9b5c81f0c918c63d73d962ed8a8e231f840bc8" }, { "id": "CVE-2024-36964-6f4c3c99", "signature_type": "Line", "target": { "file": "fs/9p/vfs_inode.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "198169395294130070620086574575023489993", "304705699618550391414350675235277136037", "263443730846894185391680059464074157021", "35592413756734472360494288092271288922" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a605930e19f451294bd838754f7d66c976a8a2c" }, { "id": "CVE-2024-36964-85937c24", "signature_type": "Line", "target": { "file": "fs/9p/vfs_inode.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "198169395294130070620086574575023489993", "304705699618550391414350675235277136037", "263443730846894185391680059464074157021", "35592413756734472360494288092271288922" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df1962a199783ecd66734d563caf0fedecf08f96" }, { "id": "CVE-2024-36964-8fac676d", "signature_type": "Function", "target": { "file": "fs/9p/vfs_inode.c", "function": "p9mode2perm" }, "signature_version": "v1", "digest": { "length": 348.0, "function_hash": "107230241424430618610593410912773329540" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df1962a199783ecd66734d563caf0fedecf08f96" }, { "id": "CVE-2024-36964-ad156f6c", "signature_type": "Line", "target": { "file": "fs/9p/vfs_inode.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "198169395294130070620086574575023489993", "304705699618550391414350675235277136037", "263443730846894185391680059464074157021", "35592413756734472360494288092271288922" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e90bc596a74bb905e0a45bf346038c3f9d1e868d" }, { "id": "CVE-2024-36964-c1b42799", "signature_type": "Function", "target": { "file": "fs/9p/vfs_inode.c", "function": "p9mode2perm" }, "signature_version": "v1", "digest": { "length": 348.0, "function_hash": "107230241424430618610593410912773329540" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad4f65328661392de74e3608bb736fedf3b67e32" }, { "id": "CVE-2024-36964-c71109c8", "signature_type": "Line", "target": { "file": "fs/9p/vfs_inode.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "198169395294130070620086574575023489993", "304705699618550391414350675235277136037", "263443730846894185391680059464074157021", "35592413756734472360494288092271288922" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd25e15e57e68a6b18dc9323047fe9c68b99290b" } ] }