CVE ID:	CVE-2016-7097
Description:	The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2017.772   1.3.6.1.4.1.25623.1.0.871855
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7097 1038201 http://www.securitytracker.com/id/1038201 92659 http://www.securityfocus.com/bid/92659 RHSA-2017:0817 http://rhn.redhat.com/errata/RHSA-2017-0817.html RHSA-2017:1842 https://access.redhat.com/errata/RHSA-2017:1842 RHSA-2017:2077 https://access.redhat.com/errata/RHSA-2017:2077 RHSA-2017:2669 https://access.redhat.com/errata/RHSA-2017:2669 USN-3146-1 http://www.ubuntu.com/usn/USN-3146-1 USN-3146-2 http://www.ubuntu.com/usn/USN-3146-2 USN-3147-1 http://www.ubuntu.com/usn/USN-3147-1 [linux-fsdevel] 20160526 [PATCH 2/2] posix_acl: Clear SGID bit when modifying file permissions http://www.spinics.net/lists/linux-fsdevel/msg98328.html [linux-fsdevel] 20160819 [PATCH v2] posix_acl: Clear SGID bit when setting file permissions http://marc.info/?l=linux-fsdevel&m=147162313630259&w=2 [oss-security] 20160826 Re: CVE request -- linux kernel: Setting a POSIX ACL via setxattr doesn't clear the setgid bit http://www.openwall.com/lists/oss-security/2016/08/26/3 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073931017b49d9458aa351605b43a7e34598caef http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073931017b49d9458aa351605b43a7e34598caef https://bugzilla.redhat.com/show_bug.cgi?id=1368938 https://bugzilla.redhat.com/show_bug.cgi?id=1368938 https://github.com/torvalds/linux/commit/073931017b49d9458aa351605b43a7e34598caef https://github.com/torvalds/linux/commit/073931017b49d9458aa351605b43a7e34598caef https://source.android.com/security/bulletin/2017-04-01 https://source.android.com/security/bulletin/2017-04-01 https://support.f5.com/csp/article/K31603170?utm_source=f5support&%3Butm_medium=RSS https://support.f5.com/csp/article/K31603170?utm_source=f5support&%3Butm_medium=RSS