Skip to content
Threat Feed
Subscribe

Product

Ubuntu

3 briefs RSS
high threat

Local Privilege Escalation in Ubuntu Kernel via OverlayFS

Publicly available proof-of-concept exploits targeting CVE-2023-2640 and CVE-2023-32629 allow unprivileged users to gain root access on Ubuntu systems by bypassing permission checks in the overlayfs subsystem.

exploited Ubuntu privilege-escalation linux kernel overlayfs
1t 2c
high advisory

CIFSwitch Linux Kernel Local Privilege Escalation Vulnerability

The CIFSwitch vulnerability in the Linux kernel allows an unprivileged user to forge CIFS authentication key descriptions, abuse the kernel's key request mechanism, and gain root privileges by loading a malicious NSS module.

Linux Mint +12 privilege-escalation linux cifs kernel
2r 1t
medium advisory

Leveraging Linux Cgroups for Threat Detection and Investigation

This brief outlines how Linux cgroups, a kernel feature for resource management, can be repurposed to provide valuable telemetry for detecting malicious processes, particularly in systemd, Docker, and Kubernetes environments, aiding in investigations of server compromises.

Red Hat Enterprise Linux +5 linux cgroups container kubernetes docker systemd threat-detection
2r