search

prey / prey-node-client

Node.js client for the Prey anti-theft software.
http://preyproject.com
GNU General Public License v3.0
330 stars 76 forks source link

setgid() disabled: io_uring may be enabled. See CVE-2024-22017 #1003

Open LelouBil opened 6 months ago

LelouBil commented 6 months ago

When running prey config hooks post_install on Fedora 40 Silverblue, I get this error :

 EXCEPTION! The "uid" argument must be of type number. Received undefined
TypeError [ERR_INVALID_ARG_TYPE]: The "uid" argument must be of type number. Received undefined
    at Object.lchown (node:fs:1995:3)
    at chown (/var/home/leloubil/Documents/prey-node-client/node_modules/chownr/chownr.js:69:13)
    at chownrKid (/var/home/leloubil/Documents/prey-node-client/node_modules/chownr/chownr.js:94:5)
    at /var/home/leloubil/Documents/prey-node-client/node_modules/chownr/chownr.js:123:31
    at Array.forEach (<anonymous>)
    at /var/home/leloubil/Documents/prey-node-client/node_modules/chownr/chownr.js:123:14
    at node:fs:194:23
    at node:internal/util:519:12
    at getDirents (node:internal/fs/utils:286:7)
    at req.oncomplete (node:fs:1480:7)

I traced it back to the library uid-number calling setgid with the group name and failing, thus returing this string setgid() disabled: io_uring may be enabled. See CVE-2024-22017 instead of the uid and the "uid must be of type number" error