GCVE - cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:lts:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:lts:*:*:*

part: o version: * update: *

Vendor	Canonical (`bedcba35-8c3d-5a60-8532-2ba876a6ec88`)
Product	Ubuntu Linux (`f82c71f7-7613-59c6-b78d-a15b5eb77bd3`)
Edition	*
Language	*
Software edition	lts
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-3493`	vulnerable	2026-06-08 05:33:52.478579	Details available HIGH (8.8) The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges. Published: 2021-04-17T04:20:16.706Z Updated: 2025-10-21T23:25:48.908Z Open on db.gcve.eu Reference links https://ubuntu.com/security/notices/USN-4917-1 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52 https://www.openwall.com/lists/oss-security/2021/04/16/1 http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html http://packetstormsecurity.com/files/162866/Ubuntu-OverlayFS-Local-Privilege-Escalation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3492`	vulnerable	2026-06-08 05:33:52.477000	Ubuntu linux kernel shiftfs file system double free vulnerability HIGH (8.8) Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562. Published: 2021-04-17T04:20:16.011Z Updated: 2024-09-17T03:54:52.527Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2021/04/16/2 https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=8fee52ab9da87d82bc6de9ebb3480fff9b4d53e6 https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=25c891a949bf918b59cbc6e4932015ba4c35c333 https://ubuntu.com/security/notices/USN-4917-1 https://www.zerodayinitiative.com/advisories/ZDI-21-422/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.