Bug 6836 - [Anolis OS 23] Bugfix for CVE-2023-2861
Summary: [Anolis OS 23] Bugfix for CVE-2023-2861
Status: NEW
Alias: None
Product: Anolis OS 23
Classification: Anolis OS
Component: BaseOS Packages (show other bugs) BaseOS Packages
Version: unspecified
Hardware: All Linux
: P4-Low S4-trivial
Target Milestone: ---
Assignee: happy_orange
QA Contact: bolong_tbl
URL:
Whiteboard:
Keywords: CVE
Depends on:
Blocks:
 
Reported: 2023-10-16 16:38 UTC by 小龙
Modified: 2023-10-16 16:38 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description 小龙 admin 2023-10-16 16:38:18 UTC 
Description:
QEMU中的9p直通文件系统(9pfs)实现中发现了一个缺陷。9pfs服务器没有禁止在主机端打开特殊文件，这可能允许恶意客户端通过在共享文件夹中创建和打开设备文件来逃离导出的9p树。

Broken commit info:

Bugfix commit info:
https://gitlab.com/qemu-project/qemu/-/commit/f6b0de53fb87ddefed348a39284c8e2f28dc4eda