Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 512
Alerts This Week
Warning Icon 1 512

Ubuntu 23.04 USN-6292-1 Critical: Ceph Privilege Escalation

ubuntu
Calendar Grey August 16, 2023
Scroller Ubuntu
Mitigating Ceph weakness in Ubuntu 23.04 is essential to avert unauthorized software operations as an admin. Ensure updates are applied promptly.
Ceph could be made to run programs as an administrator.

Summary

Ceph could be made to run programs as an administrator.

Software Description:

- ceph: distributed storage and file system

Details:

It was discovered that Ceph incorrectly handled crash dumps. A local

attacker could possibly use this issue to escalate privileges to root.

Topics%20covered

Topics Covered

security advisory critical privilege escalation ubuntu administrator access ceph

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   ceph                            17.2.6-0ubuntu0.23.04.2
   ceph-base                       17.2.6-0ubuntu0.23.04.2
   ceph-common                     17.2.6-0ubuntu0.23.04.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6292-1

CVE-2022-3650

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6292-1

Topics%20covered

Topics Covered

security advisory critical privilege escalation ubuntu administrator access ceph

Package Information

https://launchpad.net/ubuntu/+source/ceph/17.2.6-0ubuntu0.23.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.