The Ubuntu Linux kernel has multiple vulnerabilities, including an out-of-bounds read vulnerability in the NTFS file system implementation, a local privilege escalation vulnerability in the OverlayFS module, a vulnerability in the IP-VLAN network driver, vulnerabilities in the netfilter subsystem, a vulnerability in the Ricoh R5C592 MemoryStick card reader driver, and a race condition vulnerability in the io_uring subsystem. These vulnerabilities allow attackers to gain elevated privileges, execute arbitrary code, or cause denial of service attacks, and can be exploited using publicly available exploits. Users are advised to update their kernels to the latest version and security teams should consider patching their workloads or restricting OverlayFS to root users only.
View full story…
