USN-2644-2
USN-2644-2 · linux-lts-utopic regression
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's overlayfs file system. The removal of a directory that only exists on the lower layer results in a kernel panic. We apologize for the inconvenience. Original advisory details: Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
linux-lts-utopic Ubuntu:14.04:LTS
- Versions du logiciel
- 3.16.0-25.33~14.04.2
- 3.16.0-26.35~14.04.1
- 3.16.0-28.37~14.04.1
- 3.16.0-28.38~14.04.1
- 3.16.0-29.39~14.04.1
- 3.16.0-30.40~14.04.1
- 3.16.0-31.41~14.04.1
- 3.16.0-31.43~14.04.1
- 3.16.0-33.44~14.04.1
- 3.16.0-34.45~14.04.1
- 3.16.0-34.47~14.04.1
- 3.16.0-36.48~14.04.1
- 3.16.0-37.49~14.04.1
- 3.16.0-37.51~14.04.1
- 3.16.0-38.52~14.04.1
- 3.16.0-39.53~14.04.1
- 3.16.0-40.54~14.04.1
- 3.16.0-41.55~14.04.1
- Plages de versions concernées
- ECOSYSTEM: < 3.16.0-41.57~14.04.1
Mettez à jour vers 3.16.0-41.57~14.04.1