A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade perfUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump | Apr 6, 2023 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.93-55.139Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-devel | Jun 11, 2024 | Mar 22, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_22_2-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kernelUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-4_18_0-425_13_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-5_14_0-162_22_2-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_22_2 | Apr 6, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade kernel | Apr 6, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 6, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extra | Mar 12, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-default-optional | May 10, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1033-oracleUpgrade linux-image-5.15.0-1028-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-70-generic-64kUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-5.15.0-70-genericUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1032-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1024-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1031-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-5.15.0-1027-raspi-nolpaeUpgrade linux-image-6.0.0-1015-oemUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1027-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1036-azureUpgrade linux-image-virtualUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.15.0-70-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1028-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-70-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1034-awsUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-5.15.0-1036-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1018-gkeopUpgrade linux-image-5.15.0-1031-gkeUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-70-generic-lpaeUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1017-raspi-nolpae | Apr 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub