CVE-2016-1237

kernel: Missing check for permissions when setting ACL

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.0

Review impact separately from score.

Published · June 24, 2016

Updated · November 21, 2025

Description

It was found that nfsd is missing permissions check when setting ACL on files, this may allow a local users to gain access to any file by setting a crafted ACL.

Statement

This issue does not affect any of Red Hat's shipping products.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 7.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0 · 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-863 · Incorrect Authorization