Skip to main content

Ubuntu Linux Kernel Multiple Vulnerabilities

Last Update Date: 18 Jun 2025 Release Date: 11 Apr 2023 10092 Views

RISK: Medium Risk

TYPE: Operating Systems - Linux

TYPE: Linux

Multiple vulnerabilities were identified in Ubuntu Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, security restriction bypass, sensitive information disclosure and elevation of privilege on the targeted system.

 

Note:
Exploit in the wild has been detected for CVE-2023-0386. Unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. The vulnerability potentially allows a local attacker to escalate the privileges on the targeted system. 

 

[Updated on 2023-04-13] 

Updated System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.

 

[Updated on 2023-04-14] 

Updated System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.

 

[Updated on 2023-04-18] 

Updated Solutions, Vulnerability Identifier and Related Links.

 

[Updated on 2023-04-19] 

Updated System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.

 

[Updated on 2023-04-20] 

Updated Impact, System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.

 

[Updated on 2023-04-21] 

Updated Solutions, Vulnerability Identifier and Related Links.

 

[Updated on 2023-04-27] 

Updated Solutions, Vulnerability Identifier and Related Links.

 

[Updated on 2025-06-18] 

Updated Description and Related Links.


Impact

  • Denial of Service
  • Remote Code Execution
  • Security Restriction Bypass
  • Information Disclosure
  • Elevation of Privilege

System / Technologies affected

  • Ubuntu 14.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 18.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS
  • Ubuntu 22.10

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:


Vulnerability Identifier


Source


Related Link