https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:34:22 +0000 https://vulnerability.circl.lu/vuln/cve-2023-2640 <p><strong>Affected:</strong> Canonical Ubuntu Kernel, canonical ubantu_kernel</p> <p>On Ubuntu kernels carrying both c914c0e27eb0 and &#34;UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs&#34;, an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.</p> <p><strong>Affected:</strong> Canonical Ubuntu Kernel, canonical ubantu_kernel</p> <p>On Ubuntu kernels carrying both c914c0e27eb0 and &#34;UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs&#34;, an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.</p> https://vulnerability.circl.lu/vuln/cve-2023-2640 https://vulnerability.circl.lu/vuln/usn-6248-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-oem-6.0</p> <p>It was discovered that the network queuing discipline implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-47929)</p> <p>It was discovered that a race condition existed in Adreno GPU DRM driver in the Linux kernel, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-21106)</p> <p>Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-2640)</p> <p>Mingi Cho discovered that the netfilter subsystem in the Linux kernel did not properly validate the status of a nft chain while performing a lookup by id, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-31248)</p> <p>Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-32629)</p> <p>Querijn Voet discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a…</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: linux-oem-6.0</p> <p>It was discovered that the network queuing discipline implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-47929)</p> <p>It was discovered that a race condition existed in Adreno GPU DRM driver in the Linux kernel, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-21106)</p> <p>Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-2640)</p> <p>Mingi Cho discovered that the netfilter subsystem in the Linux kernel did not properly validate the status of a nft chain while performing a lookup by id, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-31248)</p> <p>Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-32629)</p> <p>Querijn Voet discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a…</p> https://vulnerability.circl.lu/vuln/usn-6248-1