| Name | CVE-2024-26822 |
| Description | In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the values from the parent mount. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-4499-1, DSA-6163-1 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| linux (PTS) | bullseye | 5.10.223-1 | fixed |
| bullseye (security) | 5.10.251-5 | fixed | |
| bookworm | 6.1.170-3 | fixed | |
| bookworm (security) | 6.1.172-1 | fixed | |
| trixie | 6.12.86-1 | fixed | |
| trixie (security) | 6.12.88-1 | fixed | |
| forky, sid | 7.0.7-1 | fixed | |
| linux-6.1 (PTS) | bullseye (security) | 6.1.172-1~deb11u1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| linux | source | buster | (not affected) | |||
| linux | source | bullseye | (not affected) | |||
| linux | source | bookworm | 6.1.164-1 | DSA-6163-1 | ||
| linux | source | (unstable) | 6.7.7-1 | |||
| linux-6.1 | source | bullseye | 6.1.164-1~deb11u1 | DLA-4499-1 |
[bullseye] - linux <not-affected> (Vulnerable code not present)
[buster] - linux <not-affected> (Vulnerable code not present)
https://git.kernel.org/linus/4508ec17357094e2075f334948393ddedbb75157 (6.8-rc5)