A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-rt-develUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-docUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-debug-devel | Apr 6, 2023 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Jun 11, 2024 | Mar 22, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_22_2Upgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kernel | Apr 6, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade kernel | Apr 6, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 6, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo | Mar 12, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-debug-develUpgrade dtb-armUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade dtb-amdUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade dtb-broadcom | May 10, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-70-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1028-ibmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-70-lowlatencyUpgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-41-genericUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1034-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.15.0-1018-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.15.0-1036-azure-fdeUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1031-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-1027-raspiUpgrade linux-image-5.15.0-1036-azureUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1028-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-genericUpgrade linux-image-5.15.0-70-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1027-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1033-oracleUpgrade linux-image-5.15.0-1031-kvmUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-70-lowlatency-64kUpgrade linux-image-5.15.0-70-generic-64kUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-5.15.0-1032-gcpUpgrade linux-image-6.0.0-1015-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.17.0-1031-oem | Apr 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub