Detections
Analytics

Bottlerocket: kernel-5.10: security update to 5.10.227kernel-5.15: security update to 5.15.168

medium Tenable Self-Hosted Container Security Plugin ID 428057

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass
 permissions check in inode_setsecctx hook Marek Gresko reports that the root user on an NFS client is able
 to change the security labels on files on an NFS filesystem that is exported with root squashing enabled.
 The end of the kerneldoc comment for __vfs_setxattr_noperm() states: * This function requires the caller
 to lock the inode's i_mutex before it * is executed. It also assumes that the caller will make the
 appropriate * permission checks. nfsd_setattr() does do permissions checking via fh_verify() and
 nfsd_permission(), but those don't do all the same permissions checks that are done by
 security_inode_setxattr() and its related LSM hooks do. Since nfsd_setattr() is the only consumer of
 security_inode_setsecctx(), simplest solution appears to be to replace the call to __vfs_setxattr_noperm()
 with a call to __vfs_setxattr_locked(). This fixes the above issue and has the added benefit of causing
 nfsd to recall conflicting delegations on a file when a client tries to change its security label.
 (CVE-2024-46695)

Plugin Details

Severity: Medium

ID: 428057

Version: Revision 1.4

Type: Local

Published: 6/30/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:L/AC:L/Au:M/C:N/I:C/A:N

CVSS Score Source: CVE-2024-46695

CVSS v3

Risk Factor: Medium

Base Score: 4.4

Temporal Score: 3.9

Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/13/2024

Reference Information

CVE: CVE-2024-46695