The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "linux-headers-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-azure-cloud-tools-4.15.0-1023-dbgsym": "4.15.0-1023.24~14.04.1", "linux-azure-headers-4.15.0-1023": "4.15.0-1023.24~14.04.1", "linux-cloud-tools-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-modules-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-azure-tools-4.15.0-1023-dbgsym": "4.15.0-1023.24~14.04.1", "linux-modules-extra-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-azure-tools-4.15.0-1023": "4.15.0-1023.24~14.04.1", "linux-image-unsigned-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-image-unsigned-4.15.0-1023-azure-dbgsym": "4.15.0-1023.24~14.04.1", "linux-tools-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-azure-cloud-tools-4.15.0-1023": "4.15.0-1023.24~14.04.1" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "linux-image-4.4.0-1102-aws-dbgsym": "4.4.0-1102.107", "linux-aws-cloud-tools-4.4.0-1102": "4.4.0-1102.107", "linux-tools-4.4.0-1102-aws": "4.4.0-1102.107", "linux-cloud-tools-4.4.0-1102-aws": "4.4.0-1102.107", "linux-aws-tools-4.4.0-1102": "4.4.0-1102.107", "linux-image-4.4.0-1102-aws": "4.4.0-1102.107", "linux-buildinfo-4.4.0-1102-aws": "4.4.0-1102.107", "linux-aws-headers-4.4.0-1102": "4.4.0-1102.107", "linux-headers-4.4.0-1102-aws": "4.4.0-1102.107", "linux-modules-4.4.0-1102-aws": "4.4.0-1102.107" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "virtio-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "fb-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-image-4.4.0-222-generic-dbgsym": "4.4.0-222.255~14.04.1", "linux-image-unsigned-4.4.0-222-lowlatency-dbgsym": "4.4.0-222.255~14.04.1", "kernel-image-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-cloud-tools-4.4.0-222-generic": "4.4.0-222.255~14.04.1", "linux-headers-4.4.0-222-generic": "4.4.0-222.255~14.04.1", "usb-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "mouse-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "md-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-headers-4.4.0-222": "4.4.0-222.255~14.04.1", "linux-modules-extra-4.4.0-222-generic": "4.4.0-222.255~14.04.1", "pata-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "fs-secondary-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-cloud-tools-4.4.0-222-lowlatency": "4.4.0-222.255~14.04.1", "linux-tools-4.4.0-222-generic": "4.4.0-222.255~14.04.1", "linux-image-unsigned-4.4.0-222-generic": "4.4.0-222.255~14.04.1", "linux-image-4.4.0-222-generic": "4.4.0-222.255~14.04.1", "linux-modules-4.4.0-222-generic": "4.4.0-222.255~14.04.1", "floppy-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-image-unsigned-4.4.0-222-lowlatency": "4.4.0-222.255~14.04.1", "speakup-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-tools-4.4.0-222-lowlatency": "4.4.0-222.255~14.04.1", "linux-lts-xenial-cloud-tools-4.4.0-222": "4.4.0-222.255~14.04.1", "sata-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "crypto-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "nic-usb-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "vlan-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "fs-core-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-buildinfo-4.4.0-222-lowlatency": "4.4.0-222.255~14.04.1", "linux-image-unsigned-4.4.0-222-generic-dbgsym": "4.4.0-222.255~14.04.1", "pcmcia-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "serial-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-buildinfo-4.4.0-222-generic": "4.4.0-222.255~14.04.1", "scsi-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "plip-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-lts-xenial-tools-4.4.0-222": "4.4.0-222.255~14.04.1", "ipmi-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "nfs-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-headers-4.4.0-222-lowlatency": "4.4.0-222.255~14.04.1", "parport-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "firewire-core-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "message-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "block-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "nic-shared-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "ppp-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "nic-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "fat-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "storage-core-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "input-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "multipath-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "nic-pcmcia-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "pcmcia-storage-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "irda-modules-4.4.0-222-generic-di": "4.4.0-222.255~14.04.1", "linux-modules-4.4.0-222-lowlatency": "4.4.0-222.255~14.04.1", "linux-lts-xenial-udebs-generic": "4.4.0-222.255~14.04.1" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "virtio-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-source-4.4.0": "4.4.0-222.255", "fb-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-udebs-generic": "4.4.0-222.255", "linux-image-4.4.0-222-generic-dbgsym": "4.4.0-222.255", "linux-image-unsigned-4.4.0-222-lowlatency-dbgsym": "4.4.0-222.255", "kernel-image-4.4.0-222-generic-di": "4.4.0-222.255", "linux-cloud-tools-4.4.0-222-generic": "4.4.0-222.255", "linux-headers-4.4.0-222-generic": "4.4.0-222.255", "usb-modules-4.4.0-222-generic-di": "4.4.0-222.255", "mouse-modules-4.4.0-222-generic-di": "4.4.0-222.255", "md-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-headers-4.4.0-222": "4.4.0-222.255", "linux-modules-extra-4.4.0-222-generic": "4.4.0-222.255", "pata-modules-4.4.0-222-generic-di": "4.4.0-222.255", "fs-secondary-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-cloud-tools-4.4.0-222-lowlatency": "4.4.0-222.255", "linux-image-unsigned-4.4.0-222-generic": "4.4.0-222.255", "dasd-extra-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-image-4.4.0-222-generic": "4.4.0-222.255", "linux-tools-4.4.0-222-generic": "4.4.0-222.255", "floppy-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-modules-4.4.0-222-generic": "4.4.0-222.255", "linux-image-unsigned-4.4.0-222-lowlatency": "4.4.0-222.255", "speakup-modules-4.4.0-222-generic-di": "4.4.0-222.255", "dasd-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-tools-4.4.0-222-lowlatency": "4.4.0-222.255", "sata-modules-4.4.0-222-generic-di": "4.4.0-222.255", "crypto-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-cloud-tools-common": "4.4.0-222.255", "nic-usb-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-libc-dev": "4.4.0-222.255", "linux-doc": "4.4.0-222.255", "fs-core-modules-4.4.0-222-generic-di": "4.4.0-222.255", "vlan-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-buildinfo-4.4.0-222-lowlatency": "4.4.0-222.255", "linux-image-unsigned-4.4.0-222-generic-dbgsym": "4.4.0-222.255", "pcmcia-modules-4.4.0-222-generic-di": "4.4.0-222.255", "serial-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-tools-4.4.0-222": "4.4.0-222.255", "linux-buildinfo-4.4.0-222-generic": "4.4.0-222.255", "scsi-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-tools-host": "4.4.0-222.255", "plip-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-cloud-tools-4.4.0-222": "4.4.0-222.255", "ipmi-modules-4.4.0-222-generic-di": "4.4.0-222.255", "nfs-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-headers-4.4.0-222-lowlatency": "4.4.0-222.255", "parport-modules-4.4.0-222-generic-di": "4.4.0-222.255", "firewire-core-modules-4.4.0-222-generic-di": "4.4.0-222.255", "message-modules-4.4.0-222-generic-di": "4.4.0-222.255", "block-modules-4.4.0-222-generic-di": "4.4.0-222.255", "nic-shared-modules-4.4.0-222-generic-di": "4.4.0-222.255", "ppp-modules-4.4.0-222-generic-di": "4.4.0-222.255", "nic-modules-4.4.0-222-generic-di": "4.4.0-222.255", "fat-modules-4.4.0-222-generic-di": "4.4.0-222.255", "storage-core-modules-4.4.0-222-generic-di": "4.4.0-222.255", "nic-pcmcia-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-tools-common": "4.4.0-222.255", "input-modules-4.4.0-222-generic-di": "4.4.0-222.255", "pcmcia-storage-modules-4.4.0-222-generic-di": "4.4.0-222.255", "irda-modules-4.4.0-222-generic-di": "4.4.0-222.255", "multipath-modules-4.4.0-222-generic-di": "4.4.0-222.255", "linux-modules-4.4.0-222-lowlatency": "4.4.0-222.255" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "linux-aws-tools-4.4.0-1138": "4.4.0-1138.152", "linux-image-4.4.0-1138-aws-dbgsym": "4.4.0-1138.152", "linux-buildinfo-4.4.0-1138-aws": "4.4.0-1138.152", "linux-cloud-tools-4.4.0-1138-aws": "4.4.0-1138.152", "linux-headers-4.4.0-1138-aws": "4.4.0-1138.152", "linux-aws-headers-4.4.0-1138": "4.4.0-1138.152", "linux-modules-extra-4.4.0-1138-aws": "4.4.0-1138.152", "linux-tools-4.4.0-1138-aws": "4.4.0-1138.152", "linux-aws-cloud-tools-4.4.0-1138": "4.4.0-1138.152", "linux-modules-4.4.0-1138-aws": "4.4.0-1138.152", "linux-image-4.4.0-1138-aws": "4.4.0-1138.152" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "linux-image-4.4.0-1103-kvm-dbgsym": "4.4.0-1103.112", "linux-kvm-tools-4.4.0-1103": "4.4.0-1103.112", "linux-modules-4.4.0-1103-kvm": "4.4.0-1103.112", "linux-buildinfo-4.4.0-1103-kvm": "4.4.0-1103.112", "linux-kvm-cloud-tools-4.4.0-1103": "4.4.0-1103.112", "linux-cloud-tools-4.4.0-1103-kvm": "4.4.0-1103.112", "linux-tools-4.4.0-1103-kvm": "4.4.0-1103.112", "linux-image-4.4.0-1103-kvm": "4.4.0-1103.112", "linux-kvm-headers-4.4.0-1103": "4.4.0-1103.112", "linux-headers-4.4.0-1103-kvm": "4.4.0-1103.112" } ] }