Vulnerabilityhigh
GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-1576 | The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by… | 7.8 | 1% | PoC | |
| CVE-2021-3493 | Linux Kernel overlayfs Local Privilege Escalation via User Namespace Flaw | 7.8 | 49% | KEVPoC ×2 | KEV |
| CVE-2021-3847 | An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a… | 7.8 | <1% | ||
| CVE-2023-0386 | Local Privilege Escalation via OverlayFS in the Linux Kernel | 7.8 | 8% | KEV | KEV |
CVE-2023-2640+1 related CVE | On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU | 7.8 | 15% | PoC |
From the original article
2 min read at thehackernews.com
Cybersecurity researchers have disclosed two high-severity security flaws in the Ubuntu kernel that could pave the way for local privilege escalation attacks. Cloud security firm Wiz, in a report shared with The Hacker News, said the easy-to-exploit shortcomings have the potential to impact 40% of Ubuntu users.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.