Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.4.0-1106-awsUpgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gke-5.4Upgrade linux-image-6.1.0-1019-oemUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-gcpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-awsUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-fips-5.15Upgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-aws-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-5.15.0-1103-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-genericUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-177-fipsUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.15.0-1058-nvidia-tegraUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-5.15.0-1106-awsUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-5.15.0-177-genericUpgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-realtime-5.15Upgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-6.0.0-1020-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1089-gkeopUpgrade linux-image-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1101-nvidia-lowlatencyUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1111-azure | Jul 26, 2023 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub