https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:43:02 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-081 certfr-2015-avi-081 https://cve.radiocsirt.org/vuln/certfr-2015-avi-081 https://cve.radiocsirt.org/vuln/euvd-2026-103524 EUVD-2026-103524 https://cve.radiocsirt.org/vuln/euvd-2026-103524 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8989 <p>The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a &#34;negative groups&#34; issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.</p> <p>The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a &#34;negative groups&#34; issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-8989 https://cve.radiocsirt.org/vuln/ghsa-86g9-4xm6-2vw3 <p>The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a &#34;negative groups&#34; issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.</p> <p>The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a &#34;negative groups&#34; issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.</p> https://cve.radiocsirt.org/vuln/ghsa-86g9-4xm6-2vw3 https://cve.radiocsirt.org/vuln/gsd-2014-8989 gsd-2014-8989 https://cve.radiocsirt.org/vuln/gsd-2014-8989 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-8989 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-hwe-edge, Ubuntu:20.04:LTS: linux-azure-fde, Ubuntu:Pro:20.04:LTS: linux-azure-fde-5.15, Ubuntu:20.04:LTS: linux-gke, Ubuntu:20.04:LTS: linux-gkeop and 12 more</p> <p>The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a &#34;negative groups&#34; issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-hwe-edge, Ubuntu:20.04:LTS: linux-azure-fde, Ubuntu:Pro:20.04:LTS: linux-azure-fde-5.15, Ubuntu:20.04:LTS: linux-gke, Ubuntu:20.04:LTS: linux-gkeop and 12 more</p> <p>The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a &#34;negative groups&#34; issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-8989