The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.
Information Disclosure
Linux
Ubuntu
Canonical
Ubuntu Linux
NVD
CVSS 3.1
7.8
EPSS
44.0%
Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Memory Leak vulnerability could allow attackers to exhaust available memory leading to denial of service.
RCE
Denial Of Service
Linux
Ubuntu
Canonical
+1
NVD
CVSS 3.1
7.8
EPSS
1.5%