CyberRota Analysis
AI-GeneratedThe vulnerability arises from a flaw in the kernel functions unlinkat(2) and funlinkat(2), where the AT_RESOLVE_BENEATH flag is not properly enforced during path resolution, allowing processes to delete files outside their intended directory. This can lead to unauthorized file deletions, posing a significant risk for applications that depend on this flag for path containment. Organizations utilizing these kernel functions should prioritize addressing this issue to prevent potential data loss and maintain directory integrity.
Original NVD Description
The kernel function that implements unlinkat(2) and funlinkat(2) validated the AT_RESOLVE_BENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted. A process that uses AT_RESOLVE_BENEATH with unlinkat(2) or funlinkat(2) to confine path resolution can in fact resolve paths above the starting directory. A caller relying on this flag for path containment may delete files outside the intended directory tree.
Related CVEs
Other vulnerabilities affecting the same vendor(s)