USN-3836-1
- Source
- https://ubuntu.com/security/notices/USN-3836-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3836-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-3836-1
- Upstream
- Related
- Published
- 2018-12-03T19:40:09Z
- Modified
- 2026-04-22T09:52:58.692098Z
- Summary
- linux, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities
- Details
-
Jann Horn discovered that the Linux kernel mishandles mapping UID or GID ranges inside nested user namespaces in some situations. A local attacker could use this to bypass access controls on resources outside the namespace. (CVE-2018-18955)
Philipp Wendler discovered that the overlayfs implementation in the Linux kernel did not properly verify the directory contents permissions from within a unprivileged user namespace. A local attacker could use this to expose sensitive information (protected file names). (CVE-2018-6559)
- References
Affected packages
Ubuntu:18.04:LTS / linux
Package
- Name
- linux
- Purl
- pkg:deb/ubuntu/linux@4.15.0-42.45?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.15.0-42.45
Affected versions
4.*
4.13.0-16.19
4.13.0-17.20
4.13.0-25.29
4.13.0-32.35
4.15.0-10.11
4.15.0-12.13
4.15.0-13.14
4.15.0-15.16
4.15.0-19.20
4.15.0-20.21
4.15.0-22.24
4.15.0-23.25
4.15.0-24.26
4.15.0-29.31
4.15.0-30.32
4.15.0-32.35
4.15.0-33.36
4.15.0-34.37
4.15.0-36.39
4.15.0-38.41
4.15.0-39.42
Ecosystem specific
{
"binaries": [
{
"binary_name": "block-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "block-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "block-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "crypto-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "crypto-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "crypto-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "dasd-extra-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "dasd-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fat-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fat-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fat-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fb-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "firewire-core-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "floppy-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fs-core-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fs-core-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fs-core-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fs-secondary-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fs-secondary-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "fs-secondary-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "input-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "input-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "input-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "ipmi-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "ipmi-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "ipmi-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "irda-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "irda-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "irda-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "kernel-image-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "kernel-image-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "kernel-image-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-cloud-tools-4.15.0-42",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-cloud-tools-4.15.0-42-generic",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-cloud-tools-4.15.0-42-lowlatency",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-headers-4.15.0-42",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-headers-4.15.0-42-generic",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-headers-4.15.0-42-generic-lpae",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-headers-4.15.0-42-lowlatency",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-headers-4.15.0-42-snapdragon",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-image-4.15.0-42-generic",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-image-4.15.0-42-generic-lpae",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-image-4.15.0-42-lowlatency",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-image-4.15.0-42-snapdragon",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-image-unsigned-4.15.0-42-generic",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-image-unsigned-4.15.0-42-lowlatency",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-modules-4.15.0-42-generic",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-modules-4.15.0-42-generic-lpae",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-modules-4.15.0-42-lowlatency",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-modules-4.15.0-42-snapdragon",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-modules-extra-4.15.0-42-generic",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-source-4.15.0",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-tools-4.15.0-42",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-tools-4.15.0-42-generic",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-tools-4.15.0-42-generic-lpae",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-tools-4.15.0-42-lowlatency",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-tools-4.15.0-42-snapdragon",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-tools-common",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-tools-host",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-udebs-generic",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-udebs-generic-lpae",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "linux-udebs-snapdragon",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "md-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "md-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "md-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "message-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "message-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "mouse-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "mouse-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "mouse-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "multipath-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "multipath-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "multipath-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nfs-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nfs-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nfs-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-pcmcia-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-shared-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-shared-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-shared-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-usb-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-usb-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "nic-usb-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "parport-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "parport-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "parport-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "pata-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "pcmcia-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "pcmcia-storage-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "plip-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "plip-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "plip-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "ppp-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "ppp-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "ppp-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "sata-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "sata-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "sata-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "scsi-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "scsi-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "scsi-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "serial-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "storage-core-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "storage-core-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "storage-core-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "usb-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "usb-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "usb-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "virtio-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "virtio-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "vlan-modules-4.15.0-42-generic-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "vlan-modules-4.15.0-42-generic-lpae-di",
"binary_version": "4.15.0-42.45"
},
{
"binary_name": "vlan-modules-4.15.0-42-snapdragon-di",
"binary_version": "4.15.0-42.45"
}
],
"availability": "No subscription required"
}
Database specific
cves_map
{
"cves": [
{
"id": "CVE-2018-6559",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2018-18955",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3836-1.json"
Ubuntu:18.04:LTS / linux-gcp
Package
- Name
- linux-gcp
- Purl
- pkg:deb/ubuntu/linux-gcp@4.15.0-1025.26?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.15.0-1025.26
Affected versions
4.*
4.15.0-1001.1
4.15.0-1003.3
4.15.0-1005.5
4.15.0-1006.6
4.15.0-1008.8
4.15.0-1009.9
4.15.0-1010.10
4.15.0-1014.14
4.15.0-1015.15
4.15.0-1017.18
4.15.0-1018.19
4.15.0-1019.20
4.15.0-1021.22
4.15.0-1023.24
4.15.0-1024.25
Ecosystem specific
{
"binaries": [
{
"binary_name": "linux-gcp-headers-4.15.0-1025",
"binary_version": "4.15.0-1025.26"
},
{
"binary_name": "linux-gcp-tools-4.15.0-1025",
"binary_version": "4.15.0-1025.26"
},
{
"binary_name": "linux-headers-4.15.0-1025-gcp",
"binary_version": "4.15.0-1025.26"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1025-gcp",
"binary_version": "4.15.0-1025.26"
},
{
"binary_name": "linux-modules-4.15.0-1025-gcp",
"binary_version": "4.15.0-1025.26"
},
{
"binary_name": "linux-modules-extra-4.15.0-1025-gcp",
"binary_version": "4.15.0-1025.26"
},
{
"binary_name": "linux-tools-4.15.0-1025-gcp",
"binary_version": "4.15.0-1025.26"
}
],
"availability": "No subscription required"
}
Database specific
cves_map
{
"cves": [
{
"id": "CVE-2018-6559",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2018-18955",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3836-1.json"
Ubuntu:18.04:LTS / linux-kvm
Package
- Name
- linux-kvm
- Purl
- pkg:deb/ubuntu/linux-kvm@4.15.0-1027.27?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.15.0-1027.27
Affected versions
4.*
4.15.0-1002.2
4.15.0-1003.3
4.15.0-1004.4
4.15.0-1006.6
4.15.0-1008.8
4.15.0-1010.10
4.15.0-1011.11
4.15.0-1012.12
4.15.0-1016.16
4.15.0-1017.17
4.15.0-1019.19
4.15.0-1020.20
4.15.0-1021.21
4.15.0-1023.23
4.15.0-1025.25
4.15.0-1026.26
Ecosystem specific
{
"binaries": [
{
"binary_name": "linux-headers-4.15.0-1027-kvm",
"binary_version": "4.15.0-1027.27"
},
{
"binary_name": "linux-image-4.15.0-1027-kvm",
"binary_version": "4.15.0-1027.27"
},
{
"binary_name": "linux-kvm-headers-4.15.0-1027",
"binary_version": "4.15.0-1027.27"
},
{
"binary_name": "linux-kvm-tools-4.15.0-1027",
"binary_version": "4.15.0-1027.27"
},
{
"binary_name": "linux-modules-4.15.0-1027-kvm",
"binary_version": "4.15.0-1027.27"
},
{
"binary_name": "linux-tools-4.15.0-1027-kvm",
"binary_version": "4.15.0-1027.27"
}
],
"availability": "No subscription required"
}
Database specific
cves_map
{
"cves": [
{
"id": "CVE-2018-6559",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2018-18955",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3836-1.json"
Ubuntu:18.04:LTS / linux-raspi2
Package
- Name
- linux-raspi2
- Purl
- pkg:deb/ubuntu/linux-raspi2@4.15.0-1029.31?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.15.0-1029.31
Affected versions
4.*
4.13.0-1005.5
4.13.0-1006.6
4.13.0-1008.8
4.15.0-1006.7
4.15.0-1009.10
4.15.0-1010.11
4.15.0-1011.12
4.15.0-1012.13
4.15.0-1013.14
4.15.0-1017.18
4.15.0-1018.19
4.15.0-1020.22
4.15.0-1021.23
4.15.0-1022.24
4.15.0-1024.26
4.15.0-1026.28
4.15.0-1027.29
4.15.0-1028.30
Ecosystem specific
{
"binaries": [
{
"binary_name": "linux-headers-4.15.0-1029-raspi2",
"binary_version": "4.15.0-1029.31"
},
{
"binary_name": "linux-image-4.15.0-1029-raspi2",
"binary_version": "4.15.0-1029.31"
},
{
"binary_name": "linux-modules-4.15.0-1029-raspi2",
"binary_version": "4.15.0-1029.31"
},
{
"binary_name": "linux-raspi2-headers-4.15.0-1029",
"binary_version": "4.15.0-1029.31"
},
{
"binary_name": "linux-raspi2-tools-4.15.0-1029",
"binary_version": "4.15.0-1029.31"
},
{
"binary_name": "linux-tools-4.15.0-1029-raspi2",
"binary_version": "4.15.0-1029.31"
}
],
"availability": "No subscription required"
}
Database specific
cves_map
{
"cves": [
{
"id": "CVE-2018-6559",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2018-18955",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3836-1.json"