Description
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux kernel OverlayFS
before 3.0.0-16.28affectedas used in Ubuntu 10.0.4 LTS and 11.10affected
References
- http://www.openwall.com/lists/oss-security/2012/01/17/11 ↗
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055 ↗
- https://access.redhat.com/security/cve/cve-2012-0055 ↗
- http://www.ubuntu.com/usn/USN-1363-1 ↗
- http://www.ubuntu.com/usn/USN-1364-1 ↗
- http://www.ubuntu.com/usn/USN-1384-1 ↗
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941 ↗