Description
The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.
Metrics
CVSS 3.0 3.3/10
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd. | Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10 | 4.15.0-38.41; 4.18.0-10.11 |
References
- http://www.securityfocus.com/bid/105752Third Party Advisory, VDB Entry
- https://launchpad.net/bugs/1793458Exploit, Issue Tracking, Third Party Advisory
- https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.htmlThird Party Advisory
- https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.htmlThird Party Advisory
- https://usn.ubuntu.com/3832-1/Third Party Advisory
- https://usn.ubuntu.com/3833-1/Third Party Advisory
- https://usn.ubuntu.com/3835-1/Third Party Advisory
- https://usn.ubuntu.com/3836-1/Third Party Advisory
- https://usn.ubuntu.com/3836-2/Third Party Advisory
- http://www.securityfocus.com/bid/105752Third Party Advisory, VDB Entry
- https://launchpad.net/bugs/1793458Exploit, Issue Tracking, Third Party Advisory
- https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.htmlThird Party Advisory
- https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.htmlThird Party Advisory
- https://usn.ubuntu.com/3832-1/Third Party Advisory
- https://usn.ubuntu.com/3833-1/Third Party Advisory
- https://usn.ubuntu.com/3835-1/Third Party Advisory
- https://usn.ubuntu.com/3836-1/Third Party Advisory
- https://usn.ubuntu.com/3836-2/Third Party Advisory
Timeline
- Published
- Oct 26, 2018
- Last modified
- Jun 17, 2026
- NVD status
- Modified