Skip to content
OpenAdvisories

Product · Ubuntu

Linux kernel

3 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2021-3492 Public exploit

    Ubuntu linux kernel shiftfs file system double free vulnerability

    Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could u…

  • High 8.8
    CVE-2021-3493 Exploited Public exploit EPSS 49%

    The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting …

    KEV Oct 20, 2022
  • High 7.1
    CVE-2019-15794 Public exploit

    Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs

    Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for t…