CVE-2016-2854
Bug #1554262 reported by
Steve Beattie
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| linux (Ubuntu) |
New
|
Low
|
Unassigned | ||
| Precise |
Won't Fix
|
Low
|
Unassigned | ||
| Trusty |
New
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Low
|
Unassigned | ||
| Wily |
New
|
Low
|
Unassigned | ||
| Xenial |
New
|
Low
|
Unassigned | ||
| Yakkety |
Won't Fix
|
Low
|
Unassigned | ||
| linux-armadaxp (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Won't Fix
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-flo (Ubuntu) |
New
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
New
|
Low
|
Unassigned | ||
| Xenial |
New
|
Low
|
Unassigned | ||
| Yakkety |
New
|
Low
|
Unassigned | ||
| linux-goldfish (Ubuntu) |
New
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
New
|
Low
|
Unassigned | ||
| Xenial |
New
|
Low
|
Unassigned | ||
| Yakkety |
New
|
Low
|
Unassigned | ||
| linux-lts-quantal (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-lts-raring (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
New
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-lts-saucy (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-lts-trusty (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Won't Fix
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-lts-utopic (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
New
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-lts-vivid (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
New
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-lts-wily (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
New
|
Low
|
Unassigned | ||
| Vivid |
New
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-lts-xenial (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
New
|
Low
|
Unassigned | ||
| Vivid |
New
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-mako (Ubuntu) |
New
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
New
|
Low
|
Unassigned | ||
| Xenial |
New
|
Low
|
Unassigned | ||
| Yakkety |
New
|
Low
|
Unassigned | ||
| linux-manta (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
New
|
Undecided
|
Unassigned | ||
| Wily |
New
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
| linux-raspi2 (Ubuntu) |
New
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
New
|
Low
|
Unassigned | ||
| Xenial |
New
|
Low
|
Unassigned | ||
| Yakkety |
New
|
Low
|
Unassigned | ||
| linux-snapdragon (Ubuntu) |
New
|
Low
|
Unassigned | ||
| Precise |
Invalid
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
New
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
New
|
Low
|
Unassigned | ||
| Yakkety |
New
|
Low
|
Unassigned | ||
| linux-ti-omap4 (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
| Precise |
Won't Fix
|
Low
|
Unassigned | ||
| Trusty |
Invalid
|
Low
|
Unassigned | ||
| Vivid |
Won't Fix
|
Undecided
|
Unassigned | ||
| Wily |
Invalid
|
Low
|
Unassigned | ||
| Xenial |
Invalid
|
Low
|
Unassigned | ||
| Yakkety |
Invalid
|
Low
|
Unassigned | ||
Bug Description
The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
CVE References
Revision history for this message
| Steve Beattie (sbeattie) wrote | #1 |
| tags: | added: kernel-cve-tracking-bug |
| information type: | Public → Public Security |
| Changed in linux-lts-trusty (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-lts-trusty (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-lts-trusty (Ubuntu Trusty): | |
| status: | New → Invalid |
| Changed in linux-lts-wily (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-lts-wily (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-lts-wily (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-lts-quantal (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-lts-quantal (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-lts-quantal (Ubuntu Trusty): | |
| status: | New → Invalid |
| Changed in linux-ti-omap4 (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-ti-omap4 (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-ti-omap4 (Ubuntu Trusty): | |
| status: | New → Invalid |
| Changed in linux-lts-raring (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-lts-raring (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-lts-raring (Ubuntu Trusty): | |
| status: | New → Invalid |
| Changed in linux-armadaxp (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-armadaxp (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-armadaxp (Ubuntu Trusty): | |
| status: | New → Invalid |
| Changed in linux-lts-xenial (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-lts-xenial (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-lts-xenial (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-lts-saucy (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-lts-saucy (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-lts-saucy (Ubuntu Trusty): | |
| status: | New → Invalid |
| Changed in linux-manta (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-lts-vivid (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-lts-vivid (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-lts-vivid (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-raspi2 (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-raspi2 (Ubuntu Trusty): | |
| status: | New → Invalid |
| Changed in linux-mako (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-lts-utopic (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-lts-utopic (Ubuntu Wily): | |
| status: | New → Invalid |
| Changed in linux-lts-utopic (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-goldfish (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-flo (Ubuntu Precise): | |
| status: | New → Invalid |
| description: | updated |
| Changed in linux-lts-trusty (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-lts-trusty (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-lts-trusty (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-lts-trusty (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-lts-wily (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-lts-wily (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-lts-wily (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-lts-wily (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-lts-quantal (Ubuntu Precise): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-lts-quantal (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-lts-quantal (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-lts-quantal (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-lts-raring (Ubuntu Precise): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-lts-raring (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-lts-raring (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-lts-raring (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-armadaxp (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-armadaxp (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-armadaxp (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-armadaxp (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-lts-xenial (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-lts-xenial (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-lts-xenial (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-lts-xenial (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-lts-saucy (Ubuntu Precise): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-lts-saucy (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-lts-saucy (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-lts-saucy (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-manta (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-manta (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-manta (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-manta (Ubuntu Trusty): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-lts-vivid (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-lts-vivid (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-lts-vivid (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-lts-vivid (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-raspi2 (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-raspi2 (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-raspi2 (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-raspi2 (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-mako (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-mako (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-mako (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-mako (Ubuntu Trusty): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-lts-utopic (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-lts-utopic (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-lts-utopic (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-lts-utopic (Ubuntu Trusty): | |
| importance: | Undecided → Low |
| Changed in linux-goldfish (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-goldfish (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-goldfish (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-goldfish (Ubuntu Trusty): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-flo (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-flo (Ubuntu Wily): | |
| importance: | Undecided → Low |
| Changed in linux-flo (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-flo (Ubuntu Trusty): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-manta (Ubuntu Xenial): | |
| status: | New → Invalid |
| Changed in linux-snapdragon (Ubuntu Precise): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-snapdragon (Ubuntu Wily): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-snapdragon (Ubuntu Xenial): | |
| importance: | Undecided → Low |
| Changed in linux-snapdragon (Ubuntu Yakkety): | |
| importance: | Undecided → Low |
| Changed in linux-snapdragon (Ubuntu Trusty): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| description: | updated |
| Changed in linux (Ubuntu Vivid): | |
| importance: | Undecided → Low |
Revision history for this message
| Andy Whitcroft (apw) wrote Closing unsupported series nomination. | #2 |
| Changed in linux (Ubuntu Yakkety): | |
| status: | New → Won't Fix |
Revision history for this message
| Andy Whitcroft (apw) wrote | #3 |
| Changed in linux (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-armadaxp (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-flo (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-goldfish (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-lts-quantal (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-lts-saucy (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-lts-trusty (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-lts-utopic (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-lts-vivid (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-mako (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-raspi2 (Ubuntu Vivid): | |
| status: | New → Won't Fix |
| Changed in linux-ti-omap4 (Ubuntu Vivid): | |
| status: | New → Won't Fix |
Revision history for this message
| Steve Langasek (vorlon) wrote | #15 |
| Changed in linux (Ubuntu Precise): | |
| status: | New → Won't Fix |
| Changed in linux-ti-omap4 (Ubuntu Precise): | |
| status: | New → Won't Fix |
| Changed in linux-lts-trusty (Ubuntu Precise): | |
| status: | New → Won't Fix |
| Changed in linux-armadaxp (Ubuntu Precise): | |
| status: | New → Won't Fix |
To post a comment you must log in.
CVE-2016-2854