A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-docUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules | Apr 6, 2023 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.93-55.139Upgrade perf | Jun 11, 2024 | Mar 22, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kernelUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kernel-rt | Apr 6, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade kernel | Apr 6, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 6, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo | Mar 12, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-rt | May 10, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1031-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1027-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1032-gcpUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-5.15.0-70-genericUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.15.0-1036-azureUpgrade linux-image-5.15.0-1028-intel-iotgUpgrade linux-image-5.15.0-70-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1033-oracleUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-5.15.0-70-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1027-raspiUpgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-70-lowlatencyUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-5.15.0-1018-gkeopUpgrade linux-image-5.15.0-70-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1031-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1036-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1034-awsUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-5.15.0-1028-ibm | Apr 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub