CVE-2025-71239
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
audit: add fchmodat2() to change attributes class
fchmodat2(), introduced in version 6.6 is currently not in the change attribute class of audit. Calling fchmodat2() to change a file attribute in the same fashion than chmod() or fchmodat() will bypass audit rules such as:
-w /tmp/test -p rwa -k test_rwa
The current patch adds fchmodat2() to the change attributes class.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 09da082b07bbae1c11d9560c8502800039aebcea < 91e27bc79c3bca93c06bf5a471d47df9a35b3741 | affected |
| Linux | Linux | 09da082b07bbae1c11d9560c8502800039aebcea < 3e762a03713e8c25ca0108c075d662c897fc0623 | affected |
| Linux | Linux | 09da082b07bbae1c11d9560c8502800039aebcea < 4fed776ca86378da7dd743a7b648e20b025ba8ef | affected |
| Linux | Linux | 09da082b07bbae1c11d9560c8502800039aebcea < c4334c0d0e7d6f02ed93756fd4ba807e3d00c05f | affected |
| Linux | Linux | 09da082b07bbae1c11d9560c8502800039aebcea < 4f493a6079b588cf1f04ce5ed6cdad45ab0d53dc | affected |
| Linux | Linux | 6.6 | affected |
| Linux | Linux | 0 < 6.6 | unaffected |
| Linux | Linux | 6.6.128 <= 6.6.* | unaffected |
| Linux | Linux | 6.12.75 <= 6.12.* | unaffected |
| Linux | Linux | 6.18.16 <= 6.18.* | unaffected |
| Linux | Linux | 6.19.6 <= 6.19.* | unaffected |
| Linux | Linux | 7.0 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/91e27bc79c3bca93c06bf5a471d47df9a35b3741
- https://git.kernel.org/stable/c/3e762a03713e8c25ca0108c075d662c897fc0623
- https://git.kernel.org/stable/c/4fed776ca86378da7dd743a7b648e20b025ba8ef
- https://git.kernel.org/stable/c/c4334c0d0e7d6f02ed93756fd4ba807e3d00c05f
- https://git.kernel.org/stable/c/4f493a6079b588cf1f04ce5ed6cdad45ab0d53dc
- https://www.bencteux.fr/posts/missing_syscalls_audit/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.