VULNERABILITY INTELLIGENCE
CVE-2018-6559
CVSS score3.3 LOW
EPSS probability0.53%
CISA KEVNot currently listed
Published2018-10-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- security@ubuntu.com — Third Party Advisory, VDB Entry
- security@ubuntu.com — Exploit, Issue Tracking, Third Party Advisory
- security@ubuntu.com — Third Party Advisory
- security@ubuntu.com — Third Party Advisory
- security@ubuntu.com — Third Party Advisory
- security@ubuntu.com — Third Party Advisory
- security@ubuntu.com — Third Party Advisory
- security@ubuntu.com — Third Party Advisory
- security@ubuntu.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory