p PatchFirst

USN-4712-1

USN-4712-1 · linux, linux-hwe-5.4, linux-hwe-5.8 regression

This page contains facts from public vulnerability sources. Check the original advisory before updating.

USN-4576-1 fixed a vulnerability in the overlay file system implementation in the Linux kernel. Unfortunately, that fix introduced a regression that could incorrectly deny access to overlay files in some situations. This update fixes the problem. We apologize for the inconvenience. Original vulnerability details: Giuseppe Scrivano discovered that the overlay file system in the Linux kernel did not properly perform permission checks in some situations. A local attacker could possibly use this to bypass intended restrictions and gain read access to restricted files.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • linux-hwe-5.4 Ubuntu:18.04:LTS

    Versions
    • 5.4.0-37.41~18.04.1
    • 5.4.0-39.43~18.04.1
    • 5.4.0-40.44~18.04.1
    • 5.4.0-42.46~18.04.1
    • 5.4.0-45.49~18.04.2
    • 5.4.0-47.51~18.04.1
    • 5.4.0-48.52~18.04.1
    • 5.4.0-51.56~18.04.1
    • 5.4.0-52.57~18.04.1
    • 5.4.0-53.59~18.04.1
    • 5.4.0-54.60~18.04.1
    • 5.4.0-56.62~18.04.1
    • 5.4.0-58.64~18.04.1
    • 5.4.0-59.65~18.04.1
    • 5.4.0-60.67~18.04.1
    • 5.4.0-62.70~18.04.1
    • 5.4.0-64.72~18.04.1
    Affected ranges
    • ECOSYSTEM: < 5.4.0-65.73~18.04.1

    Update to 5.4.0-65.73~18.04.1

  • linux Ubuntu:20.04:LTS

    Versions
    • 5.3.0-18.19
    • 5.3.0-24.26
    • 5.4.0-9.12
    • 5.4.0-18.22
    • 5.4.0-21.25
    • 5.4.0-24.28
    • 5.4.0-25.29
    • 5.4.0-26.30
    • 5.4.0-28.32
    • 5.4.0-29.33
    • 5.4.0-31.35
    • 5.4.0-33.37
    • 5.4.0-37.41
    • 5.4.0-39.43
    • 5.4.0-40.44
    • 5.4.0-42.46
    • 5.4.0-45.49
    • 5.4.0-47.51
    • 5.4.0-48.52
    • 5.4.0-51.56
    • 5.4.0-52.57
    • 5.4.0-53.59
    • 5.4.0-54.60
    • 5.4.0-56.62
    • 5.4.0-58.64
    • 5.4.0-59.65
    • 5.4.0-60.67
    • 5.4.0-62.70
    • 5.4.0-64.72
    Affected ranges
    • ECOSYSTEM: < 5.4.0-65.73

    Update to 5.4.0-65.73

  • linux-hwe-5.8 Ubuntu:20.04:LTS

    Versions
    • 5.8.0-23.24~20.04.1
    • 5.8.0-25.26~20.04.1
    • 5.8.0-28.30~20.04.1
    • 5.8.0-29.31~20.04.1
    • 5.8.0-31.33~20.04.1
    • 5.8.0-33.36~20.04.1
    • 5.8.0-34.37~20.04.2
    • 5.8.0-36.40~20.04.1
    • 5.8.0-38.43~20.04.1
    • 5.8.0-40.45~20.04.1
    Affected ranges
    • ECOSYSTEM: < 5.8.0-41.46~20.04.1

    Update to 5.8.0-41.46~20.04.1

Original sources

Check your server →