Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missing from the audit read class. Calling getxattrat() or listxattrat() on a file to read its extended attributes will bypass audit rules such as: -w /tmp/test -p rwa -k test_rwa The current patch adds missing syscalls to the audit read class.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 6140be90ec70c39fa844741ca3cc807dd0866394 before a2e8c144299c31d3972295ed80d4cb908daf4f6f; affected 6140be90ec70c39fa844741ca3cc807dd0866394 before ad37505ce869a8100ff23f24eea117de7a7516bf; affected 6140be90ec70c39fa844741ca3cc807dd0866394 before bcb90a2834c7393c26df9609b889a3097b7700cd |
| Linux / Linux | affected 6.13; unaffected 0 before 6.13; unaffected 6.18.16 through 6.18.*; unaffected 6.19.6 through 6.19.*; unaffected 7.0 through * |
CWE
No CWE identifiers supplied.