In the Linux kernel, the following vulnerability has been resolved:
sysctl: always initialize iuid/igid
Always initialize iuid/igid inside the sysfs core so set_ownership() can safely skip setting them.
Commit 5ec27ec735ba ("fs/proc/procsysctl.c: fix the default values of iuid/igid on /proc/sys inodes.") added defaults for iuid/igid when setownership() was not implemented. It also missed adjusting netctlset_ownership() to use the same default values in case the computation of a better value failed.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2591c89a6e2858796111138c38fcb6851aa1955",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2024-42312-0900da5d",
"target": {
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"line_hashes": [
"235870061761241237688603271913217207622",
"152428362015209278601199907435118242627",
"287660836316021561086928815969092242662",
"85600177388848064600227578075811617126",
"316265730398381435988982475620554636196",
"63054970028360891204031659517015597580",
"163646842847908892150470587757824209005",
"178032013169957835220666115627827853761",
"162852548531157194895959745004340774834"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98ca62ba9e2be5863c7d069f84f7166b45a5b2f4",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2024-42312-0fb7cda1",
"target": {
"function": "proc_sys_make_inode",
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"length": 1137.0,
"function_hash": "129033043724782128164356928643919963214"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34a86adea1f2b3c3f9d864c8cce09dca644601ab",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2024-42312-364a1346",
"target": {
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"line_hashes": [
"235870061761241237688603271913217207622",
"152428362015209278601199907435118242627",
"287660836316021561086928815969092242662",
"85600177388848064600227578075811617126",
"316265730398381435988982475620554636196",
"63054970028360891204031659517015597580",
"163646842847908892150470587757824209005",
"178032013169957835220666115627827853761",
"162852548531157194895959745004340774834"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffde3af4b29bf97d62d82e1d45275587e10a991a",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2024-42312-387a0847",
"target": {
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"line_hashes": [
"134718292247754687742066761920802209114",
"213233472586478507137738599016498786985",
"269869023581641693638010239670077863747",
"120667625139631960192778836874599783178",
"94682739706630811063498139753384579351",
"63054970028360891204031659517015597580",
"163646842847908892150470587757824209005",
"178032013169957835220666115627827853761",
"162852548531157194895959745004340774834"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2591c89a6e2858796111138c38fcb6851aa1955",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2024-42312-3f28d000",
"target": {
"function": "proc_sys_make_inode",
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"length": 1196.0,
"function_hash": "188566663510704190645590553225244267868"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7e2f43d182f5dde473389dbb39f16c9f0d64536",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2024-42312-622f8e4e",
"target": {
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"line_hashes": [
"134718292247754687742066761920802209114",
"213233472586478507137738599016498786985",
"269869023581641693638010239670077863747",
"120667625139631960192778836874599783178",
"94682739706630811063498139753384579351",
"63054970028360891204031659517015597580",
"163646842847908892150470587757824209005",
"178032013169957835220666115627827853761",
"162852548531157194895959745004340774834"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffde3af4b29bf97d62d82e1d45275587e10a991a",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2024-42312-67f6cda8",
"target": {
"function": "proc_sys_make_inode",
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"length": 1171.0,
"function_hash": "273348716490145119907833746225643020976"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1deae34db9f4f8e0e03f891be2e2e15c15c8ac05",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2024-42312-6f9eb30d",
"target": {
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"line_hashes": [
"235870061761241237688603271913217207622",
"213233472586478507137738599016498786985",
"269869023581641693638010239670077863747",
"120667625139631960192778836874599783178",
"94682739706630811063498139753384579351",
"63054970028360891204031659517015597580",
"163646842847908892150470587757824209005",
"178032013169957835220666115627827853761",
"162852548531157194895959745004340774834"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98ca62ba9e2be5863c7d069f84f7166b45a5b2f4",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2024-42312-7f78460b",
"target": {
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"line_hashes": [
"134718292247754687742066761920802209114",
"213233472586478507137738599016498786985",
"269869023581641693638010239670077863747",
"120667625139631960192778836874599783178",
"94682739706630811063498139753384579351",
"63054970028360891204031659517015597580",
"163646842847908892150470587757824209005",
"178032013169957835220666115627827853761",
"162852548531157194895959745004340774834"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7e2f43d182f5dde473389dbb39f16c9f0d64536",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2024-42312-a899b7fb",
"target": {
"function": "proc_sys_make_inode",
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"length": 1137.0,
"function_hash": "129033043724782128164356928643919963214"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1deae34db9f4f8e0e03f891be2e2e15c15c8ac05",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2024-42312-f5e7b8f3",
"target": {
"function": "proc_sys_make_inode",
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"length": 1188.0,
"function_hash": "117115207709315190773212978040462192964"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34a86adea1f2b3c3f9d864c8cce09dca644601ab",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2024-42312-fc055285",
"target": {
"function": "proc_sys_make_inode",
"file": "fs/proc/proc_sysctl.c"
},
"digest": {
"length": 1196.0,
"function_hash": "188566663510704190645590553225244267868"
},
"deprecated": false
}
]