On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64kUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-fipsUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-intelUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-177-genericUpgrade linux-image-gkeopUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-5.15.0-1089-gkeopUpgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-gcp-5.15Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azureUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1058-nvidia-tegraUpgrade linux-image-5.15.0-177-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1111-azureUpgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1106-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-generic-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.0.0-1020-oemUpgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracleUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1101-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1103-oracle | Jul 26, 2023 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub