Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-aws-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-genericUpgrade linux-image-azure-5.15Upgrade linux-image-5.4.0-155-genericUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1111-azureUpgrade linux-image-5.15.0-177-fipsUpgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-64kUpgrade linux-image-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1106-awsUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-5.15.0-1058-nvidia-tegraUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-177-genericUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1089-gkeopUpgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-5.15.0-1101-nvidia-lowlatencyUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeopUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-gke-5.4Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-fipsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-5.15Upgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-fips-5.15Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-5.15.0-1103-oracleUpgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.1.0-1019-oem | Jul 26, 2023 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub