CVE-2018-16597

Published: 9/21/2018 Last updated: 8/5/2024 Reserved: 9/6/2018

An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (1)

Product	Vendor	Version
n/a	n/a	firmware ver.01.26 and earlier

References (16)

http://www.securityfocus.com/bid/105394
https://security.netapp.com/advisory/ntap-20190204-0001/
https://bugzilla.suse.com/show_bug.cgi?id=1106512
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c0ca3d70e8d3cf81e2255a217f7ca402f5ed0862
https://support.f5.com/csp/article/K22691834
http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html
https://seclists.org/bugtraq/2019/Jul/33
http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
http://www.securityfocus.com/bid/105394
https://security.netapp.com/advisory/ntap-20190204-0001/
https://bugzilla.suse.com/show_bug.cgi?id=1106512
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c0ca3d70e8d3cf81e2255a217f7ca402f5ed0862
https://support.f5.com/csp/article/K22691834
http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html
https://seclists.org/bugtraq/2019/Jul/33
http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html