{"id":"USN-4712-1","aliases":[],"status":"published","title":"linux, linux-hwe-5.4, linux-hwe-5.8 regression","description":"USN-4576-1 fixed a vulnerability in the overlay file system\nimplementation in the Linux kernel. Unfortunately, that fix introduced\na regression that could incorrectly deny access to overlay files in\nsome situations. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal vulnerability details:\n\n Giuseppe Scrivano discovered that the overlay file system in the Linux\n kernel did not properly perform permission checks in some situations. A\n local attacker could possibly use this to bypass intended restrictions and\n gain read access to restricted files.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-02-02T07:14:01Z","modified":"2026-04-22T10:11:47Z","fixes":[{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-5.4","fixed_in":["5.4.0-65.73~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux","fixed_in":["5.4.0-65.73"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","fixed_in":["5.8.0-41.46~20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-65.73~18.04.1"}]}],"versions":["5.4.0-37.41~18.04.1","5.4.0-39.43~18.04.1","5.4.0-40.44~18.04.1","5.4.0-42.46~18.04.1","5.4.0-45.49~18.04.2","5.4.0-47.51~18.04.1","5.4.0-48.52~18.04.1","5.4.0-51.56~18.04.1","5.4.0-52.57~18.04.1","5.4.0-53.59~18.04.1","5.4.0-54.60~18.04.1","5.4.0-56.62~18.04.1","5.4.0-58.64~18.04.1","5.4.0-59.65~18.04.1","5.4.0-60.67~18.04.1","5.4.0-62.70~18.04.1","5.4.0-64.72~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-65.73"}]}],"versions":["5.3.0-18.19","5.3.0-24.26","5.4.0-9.12","5.4.0-18.22","5.4.0-21.25","5.4.0-24.28","5.4.0-25.29","5.4.0-26.30","5.4.0-28.32","5.4.0-29.33","5.4.0-31.35","5.4.0-33.37","5.4.0-37.41","5.4.0-39.43","5.4.0-40.44","5.4.0-42.46","5.4.0-45.49","5.4.0-47.51","5.4.0-48.52","5.4.0-51.56","5.4.0-52.57","5.4.0-53.59","5.4.0-54.60","5.4.0-56.62","5.4.0-58.64","5.4.0-59.65","5.4.0-60.67","5.4.0-62.70","5.4.0-64.72"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-41.46~20.04.1"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-4712-1","tags":["advisory"]},{"url":"https://bugs.launchpad.net/bugs/1900141","tags":["report"]}],"sources":{"osv":[{"id":"USN-4712-1","title":"linux, linux-hwe-5.4, linux-hwe-5.8 regression","description":"USN-4576-1 fixed a vulnerability in the overlay file system\nimplementation in the Linux kernel. Unfortunately, that fix introduced\na regression that could incorrectly deny access to overlay files in\nsome situations. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal vulnerability details:\n\n Giuseppe Scrivano discovered that the overlay file system in the Linux\n kernel did not properly perform permission checks in some situations. A\n local attacker could possibly use this to bypass intended restrictions and\n gain read access to restricted files.\n","status":"published","published":"2021-02-02T07:14:01Z","modified":"2026-04-22T10:11:47.704015Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}