A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-devel | Apr 6, 2023 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perf | Jun 11, 2024 | Mar 22, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2Upgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_22_2-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debugsource | Apr 6, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade kernel | Apr 6, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 6, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-tools-libs-devel | Mar 12, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-rtUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch | May 10, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1024-awsUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.15.0-1031-kvmUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-5.15.0-70-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1027-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-intelUpgrade linux-image-5.15.0-1033-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1032-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1027-raspiUpgrade linux-image-5.15.0-70-genericUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-70-generic-64kUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.15.0-1028-intel-iotgUpgrade linux-image-5.15.0-1036-azureUpgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1018-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.15.0-70-generic-lpaeUpgrade linux-image-5.15.0-70-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1028-ibmUpgrade linux-image-5.15.0-1034-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-5.15.0-1036-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1031-gkeUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-raspi-nolpae | Apr 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub