USN-2644-2
USN-2644-2 · linux-lts-utopic regression
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's overlayfs file system. The removal of a directory that only exists on the lower layer results in a kernel panic. We apologize for the inconvenience. Original advisory details: Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
linux-lts-utopic Ubuntu:14.04:LTS
- Versiones
- 3.16.0-25.33~14.04.2
- 3.16.0-26.35~14.04.1
- 3.16.0-28.37~14.04.1
- 3.16.0-28.38~14.04.1
- 3.16.0-29.39~14.04.1
- 3.16.0-30.40~14.04.1
- 3.16.0-31.41~14.04.1
- 3.16.0-31.43~14.04.1
- 3.16.0-33.44~14.04.1
- 3.16.0-34.45~14.04.1
- 3.16.0-34.47~14.04.1
- 3.16.0-36.48~14.04.1
- 3.16.0-37.49~14.04.1
- 3.16.0-37.51~14.04.1
- 3.16.0-38.52~14.04.1
- 3.16.0-39.53~14.04.1
- 3.16.0-40.54~14.04.1
- 3.16.0-41.55~14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.16.0-41.57~14.04.1
Actualiza a 3.16.0-41.57~14.04.1