CVE-2005-3623: Linux Kernel

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.

Affected products

• Linux Linux Kernel: version 2.6.14.4 only

Published 2005-12-31. Last modified 2026-06-16.