https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T08:17:24.274805+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-3493 CVE-2021-3493 2026-10-03T08:17:24.281756+00:00

Affected: Ubuntu linux kernel

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.

 https://vulnerability.circl.lu/vuln/lsn-0076-1 LSN-0076-1 — Kernel Live Patch Security Notice 2026-10-03T08:17:24.281866+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-gke-4.15, Ubuntu:Pro:18.04:LTS: linux-gke-5.4, Ubuntu:Pro:18.04:LTS: linux-gkeop-5.4 and 8 more

It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated privileges.(CVE-2021-3493)

Piotr Krysiuk discovered that the BPF JIT compiler for x86 in the Linux kernel did not properly validate computation of branch displacements in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.(CVE-2021-29154)