p PatchFirst

USN-2644-2

USN-2644-2 · linux-lts-utopic regression

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's overlayfs file system. The removal of a directory that only exists on the lower layer results in a kernel panic. We apologize for the inconvenience. Original advisory details: Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • linux-lts-utopic Ubuntu:14.04:LTS

    Versions
    • 3.16.0-25.33~14.04.2
    • 3.16.0-26.35~14.04.1
    • 3.16.0-28.37~14.04.1
    • 3.16.0-28.38~14.04.1
    • 3.16.0-29.39~14.04.1
    • 3.16.0-30.40~14.04.1
    • 3.16.0-31.41~14.04.1
    • 3.16.0-31.43~14.04.1
    • 3.16.0-33.44~14.04.1
    • 3.16.0-34.45~14.04.1
    • 3.16.0-34.47~14.04.1
    • 3.16.0-36.48~14.04.1
    • 3.16.0-37.49~14.04.1
    • 3.16.0-37.51~14.04.1
    • 3.16.0-38.52~14.04.1
    • 3.16.0-39.53~14.04.1
    • 3.16.0-40.54~14.04.1
    • 3.16.0-41.55~14.04.1
    Affected ranges
    • ECOSYSTEM: < 3.16.0-41.57~14.04.1

    Update to 3.16.0-41.57~14.04.1

Original sources

Check your server →