CVEs-PoC/2017/CVE-2017-5551.md

### [CVE-2017-5551](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5551)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)

### Description

The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Amet13/vulncontrol
- https://github.com/alsmadi/Parse_CVE_Details