CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the NFS server (nfsd), where the return value of the ACL translation function nfsd4_acl_to_attr() is improperly handled, leading to silent discarding of ACL translation errors during the file creation process. This flaw allows the CREATE operation to proceed without enforcing the requested access control list, potentially resulting in unauthorized access to files. Organizations using Linux systems with NFS services should prioritize addressing this vulnerability to ensure proper ACL enforcement and maintain security integrity.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the return value of nfsd4_acl_to_attr() in status, but the switch(create->cr_type) block unconditionally overwrites it in every branch. ACL translation errors are silently discarded, and the CREATE proceeds without the requested ACL. Add an early exit check after nfsd4_acl_to_attr(), matching the pattern already used in nfsd4_setattr(). [ cel: prefer NFS4ERR_BADTYPE over NFS4ERR_ATTRNOTSUPP ]