On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-177-genericUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-intelUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1058-nvidia-tegraUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-5.15.0-1111-azureUpgrade linux-image-5.15.0-1106-awsUpgrade linux-image-gkeUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-6.2.0-1008-azureUpgrade linux-image-5.15.0-1103-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.0.0-1020-oemUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1101-nvidia-lowlatencyUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-oracle-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-5.15.0-177-fipsUpgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-awsUpgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-nvidia-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1089-gkeop | Jul 26, 2023 | Jul 25, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub