CVE-2024-42312

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the initialization of i uid and i gid inside the sysfs core. A commit was made to add default values for i uid and i gid when set ownership() was not implemented. However, it missed adjusting net ctl set ownership() to use the same default values in case the computation of a better value failed. This led to a vulnerability where set ownership() could safely skip setting i uid and i gid.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.