CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel allows for improper handling of server-provided mode values when the modefromsid feature is active, potentially leading to unauthorized permissions being granted. This could result in elevated privileges or access to sensitive data, posing a significant risk to system integrity. Organizations using affected Linux distributions, particularly those relying on NFS, should prioritize patching this vulnerability to mitigate potential exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.