CVE-2018-6559

Severity: low (CVSS 3.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-10-26 · updated 2026-06-17
Weakness: CWE-200

Description

The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.

Affected products

Canonical Ubuntu Linux: 16.04, 18.04, 18.10
Linux kernel: all versions

References

http://www.securityfocus.com/bid/105752
https://launchpad.net/bugs/1793458
https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.html
https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.html
https://usn.ubuntu.com/3832-1/
https://usn.ubuntu.com/3833-1/
https://usn.ubuntu.com/3835-1/
https://usn.ubuntu.com/3836-1/
https://usn.ubuntu.com/3836-2/
http://www.securityfocus.com/bid/105752
https://launchpad.net/bugs/1793458
https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.html

Get alerted when CVE-2018-6559 or the next vulnerability affects your stack