SB2018092120 - Authorization bypass in Linux kernel
Published: September 21, 2018 Updated: July 14, 2020
Security Bulletin ID
SB2018092120
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Authorization bypass (CVE-ID: CVE-2018-16597)
The vulnerability allows a local authenticated user to manipulate data.
An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.
Remediation
Install update from vendor's website.