Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.0.0-1020-oemUpgrade linux-image-gkeopUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-5.15.0-1058-nvidia-tegraUpgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-177-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-kvmUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-5.15.0-1089-gkeopUpgrade linux-image-5.15.0-1101-nvidia-lowlatencyUpgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-155-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-raspi-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-nvidia-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-177-fipsUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-5.15.0-1111-azureUpgrade linux-image-genericUpgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-nvidiaUpgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1106-awsUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.2.0-1008-azureUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1103-oracleUpgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-realtimeUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-fips-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1112-azureUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.4.0-1106-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-18.04 | Jul 26, 2023 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub