On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-ibmUpgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-fips-5.15Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-177-genericUpgrade linux-image-gkeopUpgrade linux-image-aws-64k-5.15Upgrade linux-image-intelUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-gke-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-5.15Upgrade linux-image-kvmUpgrade linux-image-lowlatency-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-gkeUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1089-gkeopUpgrade linux-image-5.15.0-177-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-5.15.0-1101-nvidia-lowlatencyUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-5.15.0-1106-awsUpgrade linux-image-awsUpgrade linux-image-5.15.0-1058-nvidia-tegraUpgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1111-azureUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.0.0-1020-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1103-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-aws-5.15 | Jul 26, 2023 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub