USN-8255-2: Linux kernel (Azure) vulnerabilities
Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-2640) Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-32629) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1111-azureto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-azure-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-azure-cvmto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
Ubuntu Linux kernel (Azure)to a version that resolves this vulnerability.Patch USN-8255-2
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-8255-2?
The severity of USN-8255-2 is rated at risk 55, indicating a significant impact on system security.
How do I fix USN-8255-2?
To fix USN-8255-2, users should update their Linux kernel (Azure) to the latest version available from Ubuntu.
What vulnerabilities are addressed in USN-8255-2?
USN-8255-2 addresses several vulnerabilities, including CVE-2026-23273, CVE-2026-23112, and CVE-2023-32629.
What systems are affected by USN-8255-2?
USN-8255-2 affects systems running the Ubuntu Linux kernel specifically for Azure environments.
Is a reboot required after applying the fix for USN-8255-2?
Yes, it is generally required to reboot the system after applying the fix for USN-8255-2 to ensure the new kernel is in use.