On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-177-genericUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.15.0-1101-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1111-azureUpgrade linux-image-ibm-5.15Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1089-gkeopUpgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-5.15.0-1058-nvidia-tegraUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-5.15.0-177-fipsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1103-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.2.0-1008-azureUpgrade linux-image-aws-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-5.15.0-1106-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.1.0-1019-oemUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-intelUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-5.15 | Jul 26, 2023 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub