VULNERABILITY INTELLIGENCE
CVE-2009-1630
CVSS score4.4 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2009-05-14
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link