A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-docUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules | Apr 6, 2023 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfo | Jun 11, 2024 | Mar 22, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_22_2-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_22_2-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_13_1-debugsource | Apr 6, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade kernel | Apr 6, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 6, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-tools | Mar 12, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade kernel-debug-develUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade dtb-cavium | May 10, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1018-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-70-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.15.0-1036-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-70-lowlatencyUpgrade linux-image-5.15.0-1034-awsUpgrade linux-image-5.15.0-1028-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1031-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-5.15.0-70-genericUpgrade linux-image-5.15.0-70-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1027-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1028-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-5.15.0-1031-kvmUpgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.15.0-1033-oracleUpgrade linux-image-intelUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1032-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.15.0-1036-azureUpgrade linux-image-5.15.0-1027-raspiUpgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-5.15.0-70-generic-64kUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-generic-lpae-hwe-22.04 | Apr 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub