The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-3.19.0-21-powerpc-e500mcUpgrade linux-image-3.16.0-41-lowlatencyUpgrade linux-image-3.16.0-41-powerpc64-smpUpgrade linux-image-3.19.0-21-lowlatencyUpgrade linux-image-3.13.0-55-generic-lpaeUpgrade linux-image-3.19.0-21-genericUpgrade linux-image-3.16.0-41-powerpc-smpUpgrade linux-image-3.13.0-55-genericUpgrade linux-image-3.2.0-86-omapUpgrade linux-image-3.2.0-86-powerpc-smpUpgrade linux-image-3.13.0-55-powerpc-smpUpgrade linux-image-3.13.0-55-lowlatencyUpgrade linux-image-3.13.0-55-powerpc64-embUpgrade linux-image-3.2.0-86-powerpc64-smpUpgrade linux-image-3.2.0-86-genericUpgrade linux-image-3.19.0-21-powerpc-smpUpgrade linux-image-3.19.0-21-generic-lpaeUpgrade linux-image-3.16.0-41-powerpc-e500mcUpgrade linux-image-3.13.0-55-powerpc-e500mcUpgrade linux-image-3.13.0-55-powerpc64-smpUpgrade linux-image-3.2.0-86-highbankUpgrade linux-image-3.13.0-55-powerpc-e500Upgrade linux-image-3.16.0-41-powerpc64-embUpgrade linux-image-3.2.0-1466-omap4Upgrade linux-image-3.2.0-86-virtualUpgrade linux-image-3.19.0-21-powerpc64-smpUpgrade linux-image-3.16.0-41-generic-lpaeUpgrade linux-image-3.19.0-21-powerpc64-embUpgrade linux-image-3.16.0-41-genericUpgrade linux-image-3.2.0-86-generic-pae | Nov 8, 2024 | Nov 28, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub