CVE-2018-6559

Published: Oct 26, 2018Modified: Jun 17, 2026

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.

Affected (4)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	All versions

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 18.10

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (18)

http://www.securityfocus.com/bid/105752

Source: security@ubuntu.com

Third Party AdvisoryVDB Entry

https://launchpad.net/bugs/1793458

Source: security@ubuntu.com

ExploitIssue TrackingThird Party Advisory

https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.html

Source: security@ubuntu.com

Third Party Advisory

https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.html

Source: security@ubuntu.com

Third Party Advisory

https://usn.ubuntu.com/3832-1/

Source: security@ubuntu.com

Third Party Advisory

https://usn.ubuntu.com/3833-1/

Source: security@ubuntu.com

Third Party Advisory

https://usn.ubuntu.com/3835-1/

Source: security@ubuntu.com

Third Party Advisory

https://usn.ubuntu.com/3836-1/

Source: security@ubuntu.com

Third Party Advisory

https://usn.ubuntu.com/3836-2/

Source: security@ubuntu.com

Third Party Advisory

http://www.securityfocus.com/bid/105752