On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-genericUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-kvm-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-intelUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-177-genericUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-gcp-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1106-awsUpgrade linux-image-realtime-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-oracle-5.15Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-5.15Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-5.15.0-1089-gkeopUpgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-5.15.0-177-fipsUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-5.15.0-1111-azureUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1103-oracleUpgrade linux-image-5.15.0-1058-nvidia-tegra | Jul 26, 2023 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub