{"id":"USN-2644-2","aliases":[],"status":"published","title":"linux-lts-utopic regression","description":"The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's\noverlayfs file system. The removal of a directory that only exists on the\nlower layer results in a kernel panic.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Philip Pettersson discovered a privilege escalation when using overlayfs\n mounts inside of user namespaces. A local user could exploit this flaw to\n gain administrative privileges on the system.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-06-21T18:54:14Z","modified":"2026-02-10T04:40:54Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-41.57~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-41.57~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-2644-2","tags":["advisory"]},{"url":"http://bugs.launchpad.net/bugs/1465998","tags":["report"]}],"sources":{"osv":[{"id":"USN-2644-2","title":"linux-lts-utopic regression","description":"The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's\noverlayfs file system. The removal of a directory that only exists on the\nlower layer results in a kernel panic.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Philip Pettersson discovered a privilege escalation when using overlayfs\n mounts inside of user namespaces. A local user could exploit this flaw to\n gain administrative privileges on the system.\n","status":"published","published":"2015-06-21T18:54:14Z","modified":"2026-02-10T04:40:54Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}