CVE-2023-3995

2023-08-0300:00:00

ubuntu.com

rejected cve

duplicate

user namespaces

local privilege escalation

0.0004 Low

EPSS

Percentile

10.1%

JSON

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
because it is a duplicate of CVE-2023-4147.

Notes

Author	Note
	Priority reason: By using unprivileged user namespaces, this can be exploited to achieve local privilege escalation.
rodrigo-zaiden	Google kCTF submission same fix commit as CVE-2023-4147, one or the other will likely be marked as duplicated.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux-hwe< anyUNKNOWN
ubuntuupstreamnoarchlinux-hwe< 6.5~rc4UNKNOWN
ubuntuupstreamnoarchlinux-hwe-5.4< 6.5~rc4UNKNOWN
ubuntuupstreamnoarchlinux-hwe-5.15< 6.5~rc4UNKNOWN
ubuntu20.04noarchlinux-hwe-5.15< 5.15.0-82.91~20.04.1UNKNOWN
ubuntuupstreamnoarchlinux-hwe-5.19< 6.5~rc4UNKNOWN
ubuntu22.04noarchlinux-hwe-5.19< anyUNKNOWN
ubuntuupstreamnoarchlinux-hwe-edge< 6.5~rc4UNKNOWN
ubuntuupstreamnoarchlinux-lts-xenial< 6.5~rc4UNKNOWN
ubuntuupstreamnoarchlinux-kvm< 6.5~rc4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux-hwe	< any	UNKNOWN
ubuntu	upstream	noarch	linux-hwe	< 6.5~rc4	UNKNOWN
ubuntu	upstream	noarch	linux-hwe-5.4	< 6.5~rc4	UNKNOWN
ubuntu	upstream	noarch	linux-hwe-5.15	< 6.5~rc4	UNKNOWN
ubuntu	20.04	noarch	linux-hwe-5.15	< 5.15.0-82.91~20.04.1	UNKNOWN
ubuntu	upstream	noarch	linux-hwe-5.19	< 6.5~rc4	UNKNOWN
ubuntu	22.04	noarch	linux-hwe-5.19	< any	UNKNOWN
ubuntu	upstream	noarch	linux-hwe-edge	< 6.5~rc4	UNKNOWN
ubuntu	upstream	noarch	linux-lts-xenial	< 6.5~rc4	UNKNOWN
ubuntu	upstream	noarch	linux-kvm	< 6.5~rc4	UNKNOWN