In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.
4.15.0-1080.84~16.04.14.15.0-1093.103~16.04.14.15.0-1081.92~16.04.14.15.0-115.116~16.04.14.10.0-14.16~16.04.14.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.3+13 more4.15.0-1051.55~16.04.14.15.0-115.1164.15.0-1080.845.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.305.3.0-1033.35Exploitability
AV:LAC:LPR:LUI:NScope
S:UImpact
C:HI:HA:NCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N