Описание
The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups" issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 4.10.0-19.21 |
| bionic | not-affected | 4.13.0-16.19 |
| devel | not-affected | 6.14.0-15.15 |
| esm-infra-legacy/trusty | released | 3.13.0-46.75 |
| esm-infra/bionic | not-affected | 4.13.0-16.19 |
| esm-infra/focal | not-affected | 5.4.0-9.12 |
| esm-infra/xenial | not-affected | 4.4.0-2.16 |
| focal | not-affected | 5.4.0-9.12 |
| jammy | not-affected | 5.13.0-19.19 |
| lucid | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | not-affected | 4.15.0-1001.1 |
| devel | not-affected | 6.14.0-1005.5 |
| esm-infra-legacy/trusty | not-affected | 4.4.0-1002.2 |
| esm-infra/bionic | not-affected | 4.15.0-1001.1 |
| esm-infra/focal | not-affected | 5.4.0-1005.5 |
| esm-infra/xenial | not-affected | 4.4.0-1001.10 |
| focal | not-affected | 5.4.0-1005.5 |
| jammy | not-affected | 5.13.0-1005.6 |
| noble | not-affected | 6.5.0-1008.8 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1015.19~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-1015.19~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 5.4.0-1020.20~18.04.2 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1020.20~18.04.2 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.14.0-1007.7~24.04.1 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-1009.9~22.04.2 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| fips-preview/jammy | not-affected | 5.15.0-1051.56+fips1 |
| fips-updates/bionic | not-affected | 4.15.0-2000.4 |
| fips-updates/focal | not-affected | 5.4.0-1021.21+fips2 |
| fips-updates/jammy | not-affected | 5.15.0-1052.57+fips1 |
| fips-updates/xenial | DNE | |
| fips/bionic | not-affected | 4.15.0-2000.4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | not-affected | 4.15.0-1031.33~16.04.1 |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 6.14.0-1004.4 |
| esm-infra-legacy/trusty | not-affected | 4.15.0-1023.24~14.04.1 |
| esm-infra/bionic | ignored | superseded by linux-azure-5.3 |
| esm-infra/focal | not-affected | 5.4.0-1006.6 |
| esm-infra/xenial | not-affected | 4.11.0-1015.15 |
| focal | not-affected | 5.4.0-1006.6 |
| jammy | not-affected | 5.13.0-1006.7 |
| noble | not-affected | 6.5.0-1007.7 |
| plucky | not-affected | 6.11.0-1004.4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 4.15.0-1082.92 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 4.15.0-1082.92 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1007.8~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-1007.8~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 5.4.0-1022.22~18.04.1 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1022.22~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | ignored | superseded by linux-azure-6.14, was needs-triage |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-1008.8~22.04.1 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | ignored | superseded by linux-azure-fde-5.15 |
| esm-infra/xenial | DNE | |
| focal | ignored | end of standard support |
| jammy | not-affected | 5.15.0-1019.24.1 |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | ignored | ESM criteria, was needed |
| esm-infra/xenial | DNE | |
| focal | ignored | end of standard support, was needed |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| fips-preview/jammy | not-affected | 5.15.0-1053.61+fips1 |
| fips-updates/bionic | not-affected | 4.15.0-1002.2 |
| fips-updates/focal | not-affected | 5.4.0-1022.22+fips1 |
| fips-updates/jammy | not-affected | 5.15.0-1058.66+fips1 |
| fips-updates/xenial | DNE | |
| fips/bionic | not-affected | 4.15.0-1002.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.8.0-1013.14 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| bluefield/jammy | not-affected | 5.15.0-1011.13 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1011.14 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.4.0-1011.14 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | ignored | end of life |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| fips-preview/jammy | not-affected | 5.15.0-73.80+fips1 |
| fips-updates/bionic | not-affected | 4.15.0-1027.32 |
| fips-updates/focal | not-affected | 5.4.0-1026.30 |
| fips-updates/jammy | not-affected | 5.15.0-92.102+fips1 |
| fips-updates/xenial | not-affected | 4.4.0-1003.3 |
| fips/bionic | not-affected | 4.15.0-1011.12 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-apps/xenial | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was ignored] |
| lucid | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | ignored | |
| trusty/esm | DNE | trusty was ignored |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | ignored | end of life |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 6.14.0-1006.6 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | ignored | superseded by linux-gcp-5.3 |
| esm-infra/focal | not-affected | 5.4.0-1005.5 |
| esm-infra/xenial | not-affected | 4.10.0-1004.4 |
| focal | not-affected | 5.4.0-1005.5 |
| jammy | not-affected | 5.13.0-1005.6 |
| noble | not-affected | 6.5.0-1007.7 |
| plucky | not-affected | 6.11.0-1003.3 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 4.15.0-1071.81 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 4.15.0-1071.81 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1006.9~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-1006.9~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 5.4.0-1021.21~18.04.1 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1021.21~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | ignored | superseded by linux-gcp-6.14, was needs-triage |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.14.0-1007.7~24.04.1 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-1010.11~22.04.1 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| fips-preview/jammy | not-affected | 5.15.0-1048.56+fips1 |
| fips-updates/bionic | not-affected | 4.15.0-2013.14 |
| fips-updates/focal | not-affected | 5.4.0-1021.21+fips1 |
| fips-updates/jammy | not-affected | 5.15.0-1048.56+fips1 |
| fips-updates/xenial | DNE | |
| fips/bionic | not-affected | 4.15.0-1001.1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | ignored | end of kernel support |
| focal | ignored | end of kernel support |
| jammy | not-affected | 5.15.0-1002.2 |
| noble | not-affected | 6.8.0-1003.5 |
| plucky | DNE | |
| precise | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | ignored | end of kernel support |
| focal | ignored | end of kernel support |
| jammy | not-affected | 5.15.0-1001.2 |
| noble | not-affected | 6.8.0-1001.3 |
| plucky | DNE | |
| trusty | DNE | |
| trusty/esm | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-apps/xenial | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was ignored] |
| lucid | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | ignored | |
| trusty/esm | DNE | trusty was ignored |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was ignored] |
| lucid | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | ignored | |
| trusty/esm | DNE | trusty was ignored |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | ignored | end of life |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | ignored | end of standard support |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | ignored | replaced by linux-hwe-5.4 |
| esm-infra/focal | DNE | |
| esm-infra/xenial | not-affected | 4.8.0-39.42~16.04.1 |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.15.0-33.34~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-33.34~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 5.4.0-37.41~18.04.1 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-37.41~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | ignored | superseded by linux-hwe-6.14, was needs-triage |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.14.0-24.24~24.04.3 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-38.38~22.04.1 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | ignored | end of standard support |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | ignored | superseded by linux-hwe-5.4 |
| esm-infra/focal | DNE | |
| esm-infra/xenial | not-affected | 4.8.0-36.36~16.04.1 |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1004.5 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.4.0-1004.5 |
| jammy | not-affected | 5.15.0-1002.2 |
| noble | not-affected | 6.5.0-1009.9 |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1034.37~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-1034.37~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 5.4.0-1010.11~18.04.2 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1010.11~18.04.2 |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-1008.8~22.04.1 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.8.0-1001.6 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by Ubuntu Pro ppa version |
| noble | DNE | |
| plucky | DNE | |
| realtime/jammy | not-affected | 5.15.0-1021.26 |
| trusty | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 5.15.0-1004.6 |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1003.5~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-1003.5~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1001.3 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.4.0-1001.3 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 4.15.0-1002.2 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 4.15.0-1002.2 |
| esm-infra/focal | not-affected | 5.4.0-1004.4 |
| esm-infra/xenial | not-affected | 4.4.0-1007.12 |
| focal | not-affected | 5.4.0-1004.4 |
| jammy | not-affected | 5.13.0-1004.4 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life |
| precise/esm | DNE | precise was ignored [abandoned] |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life |
| precise/esm | DNE | precise was ignored [abandoned] |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life |
| precise/esm | DNE | precise was ignored [abandoned] |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 5.15.0-22.22 |
| noble | not-affected | 6.5.0-9.9.1 |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.15.0-33.34~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-33.34~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | ignored | replaced by linux-hwe-6.14, was needs-triage |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-38.38.1~22.04.2 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life, was needed |
| precise/esm | ignored | end of life, was needed |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life, was needs-triage |
| precise/esm | ignored | end of life, was needs-triage |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life, was pending |
| precise/esm | DNE | precise was ignored [was pending [3.11.0-33.54~precise1] OEM release] |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | released | 3.13.0-46.75~precise1 |
| precise/esm | not-affected | 3.13.0-46.75~precise1 |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [3.16.0-31.41~14.04.1]] |
| lucid | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | released | 3.16.0-31.41~14.04.1 |
| trusty/esm | DNE | trusty was released [3.16.0-31.41~14.04.1] |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [3.19.0-18.18~14.04.1]] |
| lucid | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | not-affected | 3.19.0-18.18~14.04.1 |
| trusty/esm | DNE | trusty was not-affected [3.19.0-18.18~14.04.1] |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [4.2.0-18.22~14.04.1]] |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | not-affected | 4.2.0-18.22~14.04.1 |
| trusty/esm | DNE | trusty was not-affected [4.2.0-18.22~14.04.1] |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| vivid | DNE | |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | not-affected | 4.4.0-13.29~14.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| precise | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was ignored] |
| lucid | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | ignored | |
| trusty/esm | DNE | trusty was ignored |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-apps/xenial | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was ignored] |
| lucid | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | ignored | |
| trusty/esm | DNE | trusty was ignored |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was ignored] |
| lucid | DNE | |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | ignored | |
| trusty/esm | DNE | trusty was ignored |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | ignored | end of life |
| vivid | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | ignored | end of life |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 5.15.0-1005.5 |
| noble | not-affected | 6.8.0-1007.7 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.11.0-1002.2 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-1008.8~22.04.1 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.8.0-1009.9.1 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 5.15.0-1013.13 |
| noble | not-affected | 6.8.0-1003.3 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1009.9~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-1009.9~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 5.15.0-1001.1 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.11.0-1007.7 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.14.0-1005.5 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.8.0-1003.3 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 4.15.0-1008.10 |
| devel | not-affected | 6.14.0-1005.5 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 4.15.0-1008.10 |
| esm-infra/focal | not-affected | 5.4.0-1005.5 |
| esm-infra/xenial | not-affected | 4.15.0-1008.10~16.04.1 |
| focal | not-affected | 5.4.0-1005.5 |
| jammy | not-affected | 5.13.0-1008.10 |
| noble | not-affected | 6.5.0-1010.10 |
| plucky | not-affected | 6.11.0-1006.6 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1007.9~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-1007.9~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 5.4.0-1021.21~18.04.1 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1021.21~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.14.0-1007.7~24.04.1 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-1006.6~22.04.3 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was ignored [abandoned] |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | not-affected | 6.14.0-1005.5 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1007.7 |
| focal | not-affected | 5.4.0-1007.7 |
| jammy | not-affected | 5.13.0-1008.9 |
| noble | not-affected | 6.5.0-1005.7 |
| plucky | not-affected | 6.11.0-1004.4 |
| trusty | DNE | |
| trusty/esm | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 5.4.0-1013.13~18.04.1 |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 5.4.0-1013.13~18.04.1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | ignored | superseded by Ubuntu Pro ppa version |
| plucky | DNE | |
| realtime/noble | not-affected | 6.7.0-2001.1 |
| trusty | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 4.10.0-1004.6 |
| bionic | ignored | end of standard support |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | ignored | replaced by linux-raspi |
| focal | ignored | end of standard support |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| precise | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | not-affected | 6.14.0-1002.2 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | ignored | superseded by Ubuntu Pro ppa version |
| noble | ignored | superseded by Ubuntu Pro ppa version |
| plucky | not-affected | 6.11.0-1001.1 |
| realtime/jammy | not-affected | 5.15.0-1006.6 |
| realtime/noble | not-affected | 6.8.0-1008.19 |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | not-affected | 6.14.0-13.13.2 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | ignored | superseded by linux-riscv-5.8 |
| focal | ignored | end of standard support |
| jammy | ignored | end of kernel support |
| noble | ignored | replaced by linux-riscv-6.14 |
| plucky | not-affected | 6.11.0-8.8.1 |
| trusty | DNE | |
| trusty/esm | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.15.0-1015.17~20.04.1 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.15.0-1015.17~20.04.1 |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | not-affected | 6.14.0-22.22.1~24.04.1 |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | DNE | |
| esm-infra/focal | DNE | |
| esm-infra/xenial | DNE | |
| focal | DNE | |
| jammy | not-affected | 6.8.0-38.38.1~22.04.1 |
| noble | DNE | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 4.4.0-1050.54 |
| bionic | ignored | end of standard support |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| precise | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 3.19~rc1, 3.13.11-ckt14 |
| utopic | DNE | |
| vivid | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 5.4.0-1020.24 |
| esm-infra/xenial | DNE | |
| focal | not-affected | 5.4.0-1020.24 |
| jammy | not-affected | 5.15.0-1022.26 |
| noble | DNE | |
| plucky | DNE | |
| trusty | DNE |
Показывать по
Ссылки на источники
EPSS
4.6 Medium
CVSS2
Связанные уязвимости
The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups" issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.
The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups" issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.
The Linux kernel through 3.17.4 does not properly restrict dropping of ...
The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups" issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.
ELSA-2015-3064: Unbreakable Enterprise kernel security , bug fix and enhancement update (IMPORTANT)
EPSS
4.6 Medium
CVSS2