CVE-2009-1072 (retired)

Priority
Description
nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD
capability before handling a user request in a thread, which allows local
users to create device nodes, as demonstrated on a filesystem that has been
exported with the root_squash option.
Package
Source: linux (LP Ubuntu Debian)
Upstream:needs-triage
Package
Upstream:needs-triage
Package
Upstream:needs-triage
More Information

Updated: 2019-03-26 11:47:30 UTC (commit ccdecfcf0fead22bd291e5f4ea745a46872dcb15)