A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debug-modules | Apr 6, 2023 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.93-55.139Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64 | Jun 11, 2024 | Mar 22, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_22_2Upgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_6_1-debuginfo | Apr 6, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade kernel | Apr 6, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 6, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-toolsUpgrade perf | Mar 12, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-debug-devel | May 10, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-70-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-70-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1027-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1027-raspiUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1028-intel-iotgUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1036-azureUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1032-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1033-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1031-kvmUpgrade linux-image-5.15.0-70-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-70-lowlatencyUpgrade linux-image-5.15.0-1036-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-awsUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-5.15.0-1031-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1018-gkeopUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.15.0-70-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1028-ibmUpgrade linux-image-5.15.0-1034-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04 | Apr 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub