Ubuntu Linux kernel
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-3493 | 5.8 kernel – < 5.8.0-50.56 ; 5.4 kernel – < 5.4.0-72.80 ; 4.15 kernel – < 4.15.0-142.146 ; … | The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities | HIGH 8.8 | 49 % | KEV | |
| CVE-2021-3492 | 5.8 kernel – < 5.8.0-50.56 ; 5.4 kernel – < 5.4.0-72.80 | Ubuntu linux kernel shiftfs file system double free vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2019-15794 | 5.3 kernel – < 5.3.0-24.26 ; 5.0 kernel – < 5.0.0-37.40 | Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs | HIGH 7.1 | 1.2 % |