CVE-2023-6932

Note

Priority reason:
By using unprivileged user namespaces, this can be exploited to achieve local privilege escalation.
If not needed, disable the ability for unprivileged users
to create namespaces. To do this temporarily, do:
  sudo sysctl -w kernel.unprivileged_userns_clone=0
To disable across reboots, do:
  echo kernel.unprivileged_userns_clone=0 | \
  sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf

Parameter	Value
Base score	7.0
Attack vector	Local
Attack complexity	High
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2023-6932

From the Ubuntu Security Team

Notes

Mitigation

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-221.232) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (5.4.0-170.188)
	jammy	Released (5.15.0-92.102)
	lunar	Ignored (end of life, was pending [6.2.0-41.42])
	mantic	Released (6.5.0-15.15)
	trusty	Released (3.13.0-195.246) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	upstream	Needed
	xenial	Released (4.4.0-250.284) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	Patches: Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by e2b706c691905fe78468c361aaabc719d0a496f1
linux-allwinner Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Ignored (end of kernel support)
	mantic	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	xenial	Does not exist
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support)
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1164.177) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (5.4.0-1117.127)
	jammy	Released (5.15.0-1052.57)
	lunar	Ignored (end of life, was needed)
	mantic	Released (6.5.0-1012.12)
	trusty	Released (4.4.0-1127.133) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	upstream	Needed
	xenial	Released (4.4.0-1165.180) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-hwe-5.3)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-hwe-5.3)