HighFix available
fs/9p: only translate RWX permissions for plain 9P2000
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.19.314, 5.10.217, 5.15.159, 5.4.276, 6.1.91, 6.6.31, 6.8.10
- CVEs
- CVE-2024-36964
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 16:15 UTC · Revision 1
Source evidence
fs/9p: only translate RWX permissions for plain 9P2000
core-osv · Original sourcePublished 3 Jun 2024, 07:50 UTC
In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.
osv:CVE-2024-36964
Kernel
Fixed versions: 4.19.314, 5.4.276, 5.10.217, 5.15.159, 6.1.91, 6.6.31, 6.8.10
Complete source record
{
"id": "dfdc2b242796c5463631cb4422011d8f30fbfad0afc90c52e642812e07f90db1",
"url": "https://osv.dev/vulnerability/CVE-2024-36964",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "fs/9p: only translate RWX permissions for plain 9P2000",
"summary": "In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent since the unix extended bits are handled explicitly and conditionally on .u.",
"evidence": "osv:CVE-2024-36964",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.19.314",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.276",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.217",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.159",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.91",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.31",
"evidence": "/affected/1/ranges"
},
{
"value": "6.8.10",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2024-36964",
"aliases": [
"CVE-2024-36964"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "45089142b1497dab2327d60f6c71c40766fc3ea4"
},
{
"fixed": "e90bc596a74bb905e0a45bf346038c3f9d1e868d"
},
{
"fixed": "df1962a199783ecd66734d563caf0fedecf08f96"
},
{
"fixed": "5a605930e19f451294bd838754f7d66c976a8a2c"
},
{
"fixed": "ad4f65328661392de74e3608bb736fedf3b67e32"
},
{
"fixed": "ca9b5c81f0c918c63d73d962ed8a8e231f840bc8"
},
{
"fixed": "e55c601af3b1223a84f9f27f9cdbd2af5e203bf3"
},
{
"fixed": "157d468e34fdd3cb1ddc07c2be32fb3b02826b02"
},
{
"fixed": "cd25e15e57e68a6b18dc9323047fe9c68b99290b"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "3.0.5"
},
{
"fixed": "3.1"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "29a3e8657d2a2640384166e3fe29a086d235fc33"
}
]
}
],
"versions": [
"v3.0.101",
"v3.0.100",
"v3.0.99",
"v3.0.98",
"v3.0.97",
"v3.0.96",
"v3.0.95",
"v3.0.94",
"v3.0.93",
"v3.0.92",
"v3.0.91",
"v3.0.90",
"v3.0.89",
"v3.0.88",
"v3.0.87",
"v3.0.86",
"v3.0.85",
"v3.0.84",
"v3.0.83",
"v3.0.82",
"v3.0.81",
"v3.0.80",
"v3.0.79",
"v3.0.78",
"v3.0.77",
"v3.0.76",
"v3.0.75",
"v3.0.74",
"v3.0.73",
"v3.0.72",
"v3.0.71",
"v3.0.70",
"v3.0.69",
"v3.0.68",
"v3.0.67",
"v3.0.66",
"v3.0.65",
"v3.0.64",
"v3.0.63",
"v3.0.62",
"v3.0.61",
"v3.0.60",
"v3.0.59",
"v3.0.58",
"v3.0.57",
"v3.0.56",
"v3.0.55",
"v3.0.54",
"v3.0.53",
"v3.0.52",
"v3.0.51",
"v3.0.50",
"v3.0.49",
"v3.0.48",
"v3.0.47",
"v3.0.46",
"v3.0.45",
"v3.0.44",
"v3.0.43",
"v3.0.42",
"v3.0.41",
"v3.0.40",
"v3.0.39",
"v3.0.38",
"v3.0.37",
"v3.0.36",
"v3.0.35",
"v3.0.34",
"v3.0.33",
"v3.0.32",
"v3.0.31",
"v3.0.30",
"v3.0.29",
"v3.0.28",
"v3.0.27",
"v3.0.26",
"v3.0.25",
"v3.0.24",
"v3.0.23",
"v3.0.22",
"v3.0.21",
"v3.0.20",
"v3.0.19",
"v3.0.18",
"v3.0.17",
"v3.0.16",
"v3.0.15",
"v3.0.14",
"v3.0.13",
"v3.0.12",
"v3.0.11",
"v3.0.10",
"v3.0.9",
"v3.0.8",
"v3.0.7",
"v3.0.6",
"v3.0.5"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-36964.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.1.0"
},
{
"fixed": "4.19.314"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.276"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.217"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.159"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.91"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.31"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.8.10"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-36964.json"
}
}
],
"modified": "2026-10-28T02:30:37.445090820Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/157d468e34fdd3cb1ddc07c2be32fb3b02826b02",
"https://git.kernel.org/stable/c/5a605930e19f451294bd838754f7d66c976a8a2c",
"https://git.kernel.org/stable/c/ad4f65328661392de74e3608bb736fedf3b67e32",
"https://git.kernel.org/stable/c/ca9b5c81f0c918c63d73d962ed8a8e231f840bc8",
"https://git.kernel.org/stable/c/cd25e15e57e68a6b18dc9323047fe9c68b99290b",
"https://git.kernel.org/stable/c/df1962a199783ecd66734d563caf0fedecf08f96",
"https://git.kernel.org/stable/c/e55c601af3b1223a84f9f27f9cdbd2af5e203bf3",
"https://git.kernel.org/stable/c/e90bc596a74bb905e0a45bf346038c3f9d1e868d",
"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36964.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-36964",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36964.json"
}
},
"related_cves": [
{
"value": "CVE-2024-36964",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 504566,
"published_at": "2024-06-03T07:50:01.987+00:00"
}