Threats tagged 'ghsa-5g3h-v4h7-rrh3'

A vulnerability in the Linux kernel's XFS filesystem capability check allowed users to bypass group quota enforcement by changing a file's group ID to another group the user belonged to. This was due to a semantic difference between two capability checking functions, leading to quota accounting being bypassed in some cases such as via NFS clients. The issue has been fixed by using the correct capability check function to prevent quota bypass and unnecessary SELinux audit messages.