A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extra | Apr 6, 2023 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.93-55.139Upgrade bpftool-debuginfo | Jun 11, 2024 | Mar 22, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_13_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_22_2Upgrade kpatch-patch-5_14_0-162_12_1Upgrade kpatch-patch-5_14_0-162_22_2-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-4_18_0-425_13_1Upgrade kernelUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-4_18_0-425_13_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-5_14_0-162_22_2-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1-debugsource | Apr 6, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade kernel | Apr 6, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 6, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernelUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-modules | Mar 12, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-syms-azure | May 10, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-5.15.0-1031-kvmUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.15.0-1036-azureUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-5.15.0-1027-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.15.0-1032-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-70-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1027-raspi-nolpaeUpgrade linux-image-5.15.0-70-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1033-oracleUpgrade linux-image-5.15.0-1028-intel-iotgUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-5.15.0-70-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-70-lowlatencyUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-5.15.0-70-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1018-gkeopUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1034-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1028-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1036-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1031-gkeUpgrade linux-image-generic-64k | Apr 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub