http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7

http://openwall.com/lists/oss-security/2018/07/13/2

http://www.securityfocus.com/bid/106503

https://access.redhat.com/errata/RHSA-2018:2948

https://access.redhat.com/errata/RHSA-2018:3083

https://access.redhat.com/errata/RHSA-2018:3096

https://access.redhat.com/errata/RHSA-2019:0717

https://access.redhat.com/errata/RHSA-2019:2476

https://access.redhat.com/errata/RHSA-2019:2566

https://access.redhat.com/errata/RHSA-2019:2696

https://access.redhat.com/errata/RHSA-2019:2730

https://access.redhat.com/errata/RHSA-2019:4159

https://access.redhat.com/errata/RHSA-2019:4164

https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406

https://github.com/torvalds/linux/commit/0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7

https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/

https://support.f5.com/csp/article/K00854051

https://twitter.com/grsecurity/status/1015082951204327425

https://usn.ubuntu.com/3752-1/

https://usn.ubuntu.com/3752-2/

https://usn.ubuntu.com/3752-3/

https://usn.ubuntu.com/3753-1/

https://usn.ubuntu.com/3753-2/

https://usn.ubuntu.com/3754-1/

https://www.debian.org/security/2018/dsa-4266

https://www.exploit-db.com/exploits/45033/

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

OR
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (including) 4.17.4

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (including) 3.16

OR
     *cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (excluding) 13.1.3.5
     *cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* versions from (including) 14.0.0 up to (excluding) 14.1.3.1
     *cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* versions from (including) 15.0.0 up to (excluding) 15.0.1.4
     *cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:f5:big-ip_access_policy_manager:16.0.0:*

OR
     *cpe:2.3:a:redhat:mrg_realtime:2.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

http://www.securityfocus.com/bid/106503 No Types Assigned

http://www.securityfocus.com/bid/106503 Broken Link

https://access.redhat.com/errata/RHSA-2018:2948 No Types Assigned

https://access.redhat.com/errata/RHSA-2018:2948 Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3083 No Types Assigned

https://access.redhat.com/errata/RHSA-2018:3083 Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3096 No Types Assigned

https://access.redhat.com/errata/RHSA-2018:3096 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0717 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:0717 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2476 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:2476 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2566 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:2566 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2696 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:2696 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2730 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:2730 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:4159 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:4159 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:4164 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:4164 Third Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406 No Types Assigned

https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406 Mailing List, Patch, Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/ Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/ Mailing List, Third Party Advisory

https://support.f5.com/csp/article/K00854051 No Types Assigned

https://support.f5.com/csp/article/K00854051 Third Party Advisory

https://usn.ubuntu.com/3752-3/ No Types Assigned

https://usn.ubuntu.com/3752-3/ Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/ [No Types Assigned]

The inode_init_owner function in fs/inode.c in the Linux kernel through 4.17.4 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that 

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that gr

https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:4159 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:4164 [No Types Assigned]

CWE-264
CWE-264
CWE-284

CWE-269

https://access.redhat.com/errata/RHSA-2019:2730 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:2696 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:2566 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:2476 [No Types Assigned]

https://support.f5.com/csp/article/K00854051 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:0717 [No Types Assigned]

http://www.securityfocus.com/bid/106503 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2018:2948 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2018:3083 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2018:3096 [No Types Assigned]

https://usn.ubuntu.com/3752-3/ [No Types Assigned]

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

CWE-264

OR
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (including) 4.17.4

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7 No Types Assigned

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7 Patch, Vendor Advisory

http://openwall.com/lists/oss-security/2018/07/13/2 No Types Assigned

http://openwall.com/lists/oss-security/2018/07/13/2 Mailing List, Patch, Third Party Advisory

https://github.com/torvalds/linux/commit/0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7 No Types Assigned

https://github.com/torvalds/linux/commit/0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7 Patch, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html Third Party Advisory

https://twitter.com/grsecurity/status/1015082951204327425 No Types Assigned

https://twitter.com/grsecurity/status/1015082951204327425 Third Party Advisory

https://usn.ubuntu.com/3752-1/ No Types Assigned

https://usn.ubuntu.com/3752-1/ Third Party Advisory

https://usn.ubuntu.com/3752-2/ No Types Assigned

https://usn.ubuntu.com/3752-2/ Third Party Advisory

https://usn.ubuntu.com/3753-1/ No Types Assigned

https://usn.ubuntu.com/3753-1/ Third Party Advisory

https://usn.ubuntu.com/3753-2/ No Types Assigned

https://usn.ubuntu.com/3753-2/ Third Party Advisory

https://usn.ubuntu.com/3754-1/ No Types Assigned

https://usn.ubuntu.com/3754-1/ Third Party Advisory

https://www.debian.org/security/2018/dsa-4266 No Types Assigned

https://www.debian.org/security/2018/dsa-4266 Third Party Advisory

https://www.exploit-db.com/exploits/45033/ No Types Assigned

https://www.exploit-db.com/exploits/45033/ Exploit, Third Party Advisory, VDB Entry

https://usn.ubuntu.com/3752-1/ [No Types Assigned]

https://usn.ubuntu.com/3752-2/ [No Types Assigned]

https://usn.ubuntu.com/3753-1/ [No Types Assigned]

https://usn.ubuntu.com/3753-2/ [No Types Assigned]

https://usn.ubuntu.com/3754-1/ [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html [No Types Assigned]

https://www.debian.org/security/2018/dsa-4266 [No Types Assigned]

https://www.exploit-db.com/exploits/45033/ [No Types Assigned]

The inode_init_owner function in fs/inode.c in the Linux kernel through 4.17.4 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that 

The inode_init_owner function in fs/inode.c in the Linux kernel through 4.17.4 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that 

http://openwall.com/lists/oss-security/2018/07/13/2 [No Types Assigned]