A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-rt-debug-core | Apr 6, 2023 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-livepatch-5.15.93-55.139Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headers | Jun 11, 2024 | Mar 22, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-5_14_0-162_22_2Upgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_22_2-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-5_14_0-162_22_2-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1 | Apr 6, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade kernel | Apr 6, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 6, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-coreUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64 | Mar 12, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade dtb-apmUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade dtb-sprdUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-defaultUpgrade dlm-kmp-64kbUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kb | May 10, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1036-azure-fdeUpgrade linux-image-5.15.0-1028-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1034-awsUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.15.0-70-lowlatencyUpgrade linux-image-5.15.0-1018-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-70-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-41-genericUpgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1031-gkeUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1033-oracleUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.15.0-1036-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-5.15.0-1027-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-intelUpgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.15.0-1031-kvmUpgrade linux-image-5.15.0-1027-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-70-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-genericUpgrade linux-image-5.15.0-70-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1032-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-70-generic-64kUpgrade linux-image-5.15.0-1028-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-5.19.0-1025-azure | Apr 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub