https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:59:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00432 bdu:2019-00432 https://cve.radiocsirt.org/vuln/bdu:2019-00432 https://cve.radiocsirt.org/vuln/certfr-2018-avi-581 certfr-2018-avi-581 https://cve.radiocsirt.org/vuln/certfr-2018-avi-581 https://cve.radiocsirt.org/vuln/cnvd-2019-06579 cnvd-2019-06579 https://cve.radiocsirt.org/vuln/cnvd-2019-06579 https://cve.radiocsirt.org/vuln/euvd-2026-69514 EUVD-2026-69514 https://cve.radiocsirt.org/vuln/euvd-2026-69514 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18955 <p>In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction.</p> <p>In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-18955 https://cve.radiocsirt.org/vuln/ghsa-c6xj-3c77-g5rg <p>In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction.</p> <p>In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction.</p> https://cve.radiocsirt.org/vuln/ghsa-c6xj-3c77-g5rg https://cve.radiocsirt.org/vuln/gsd-2018-18955 gsd-2018-18955 https://cve.radiocsirt.org/vuln/gsd-2018-18955 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-18955 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-kvm, Ubuntu:18.04:LTS: linux-oem and 1 more</p> <p>In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-kvm, Ubuntu:18.04:LTS: linux-oem and 1 more</p> <p>In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-18955