Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Ubuntu Shiftfs in the Linux kernel 5.0.0-35.38, 5.3 kernel* Clear all filters
TI-2019-11864 CVE-2019-15793 · GHSA-h5g7-x752-wjh8

Mishandling of file-system uid/gid with namespaces in shiftfs

Priority LOW 39

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00685 Published 2020-04-23 Fixed in 5.0.0-35.38 CWE-538
TI-2019-11863 CVE-2019-15792 · GHSA-rx63-pxf9-gqg8

Type confusion in shiftfs

Priority LOW 36

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shif…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01102 Published 2020-04-23 Fixed in 5.0.0-35.38 CWE-843
TI-2019-11862 CVE-2019-15791 · GHSA-5fx5-7qgj-cmg7

Reference count underflow in shiftfs

Priority LOW 37

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01317 Published 2020-04-23 Fixed in 5.0.0-35.38 CWE-672