A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade microvm-kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-toolsUpgrade microvm-kernel-debuginfoUpgrade python-perf-debuginfoUpgrade microvm-kernelUpgrade python-perfUpgrade microvm-kernel-develUpgrade kernel-livepatch-4.14.246-187.474Upgrade kernel-debuginfo-common-x86_64Upgrade microvm-kernel-debuginfo-common-x86_64 | Sep 16, 2021 | Sep 16, 2021 |
| Amazon_linux | — | Upgrade kernel | Oct 5, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Nov 9, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Nov 29, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 18, 2021 | Aug 12, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Nov 9, 2021 |
| Suse | — | Upgrade cluster-md-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade dtb-alUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-preemptUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade dtb-armUpgrade kernel-zfcpdump-manUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade dtb-zteUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-baseUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-baseUpgrade dtb-allwinnerUpgrade kernel-preemptUpgrade dtb-rockchipUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-default-baseUpgrade gfs2-kmp-preemptUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade kernel-default-kgraftUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-vanilla-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-preempt-extraUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dlm-kmp-preemptUpgrade dtb-amdUpgrade kernel-vanillaUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade kernel-preempt-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade dtb-freescaleUpgrade kernel-preempt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-sprdUpgrade kernel-default-manUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-64kb-optional | Sep 16, 2021 | Sep 16, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-89-genericUpgrade linux-image-5.4.0-89-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-dell300xUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.11.0-38-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-5.11.0-1021-gcpUpgrade linux-image-4.15.0-159-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1020-awsUpgrade linux-image-5.4.0-1048-kvmUpgrade linux-image-azure-edgeUpgrade linux-image-5.11.0-1020-azureUpgrade linux-image-gke-5.4Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1055-gcpUpgrade linux-image-5.4.0-89-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1124-azureUpgrade linux-image-5.4.0-1062-azureUpgrade linux-image-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1058-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.10.0-1050-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.4.0-239-genericUpgrade linux-image-4.15.0-1081-oracleUpgrade linux-image-5.11.0-38-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1020-bluefieldUpgrade linux-image-5.11.0-1020-oracleUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1025-gkeopUpgrade linux-image-4.15.0-1113-snapdragonUpgrade linux-image-4.15.0-1109-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1045-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.11.0-38-genericUpgrade linux-image-4.15.0-1112-awsUpgrade linux-image-5.4.0-1006-ibmUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-5.11.0-1021-raspi-nolpaeUpgrade linux-image-4.15.0-159-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1056-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1056-gcpUpgrade linux-image-5.11.0-1021-raspiUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1100-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1054-gkeUpgrade linux-image-oemUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-4.15.0-1096-raspi2Upgrade linux-image-4.15.0-1028-dell300xUpgrade linux-image-4.15.0-159-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.11.0-38-generic-64kUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.11.0-1018-kvmUpgrade linux-image-raspi | Sep 30, 2021 | Sep 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub