● Ubuntu USN · July 2026

Ubuntu Linux Security Advisory: July 2026 OverlayFS & Memory Triage

Triage of Ubuntu's July 2026 kernel updates fixing critical OverlayFS file capability bypasses and container security isolation bugs.

CVEs Remediated

Container Escape

7.8

CVSS OverlayFS

High

Kubernetes Host Urgency

セキュリティトリアージとリスク評価

Ubuntu's July 2026 security update addresses CVE-2023-2640 (GameOver(lay)), where Ubuntu-specific modifications to OverlayFS skipped permission checks during inode copy-up, enabling unprivileged container processes to create root setuid binaries on the host filesystem.

優先脆弱性トリアージマトリックス

CVE識別番号	対象サブシステム / コンポーネント	影響範囲	CVSS	ゼロデイ悪用確認？
CVE-2023-2640	OverlayFS Inode Copy-Up	Permission Bypass / LPE	7.8 High	YES (In-The-Wild)
CVE-2024-35860	SMB / CIFS Client	Null Pointer Dereference	5.3 Medium	No
CVE-2024-35861	NVMe Driver	Race Condition / Memory Leak	6.1 Medium	No

注目ソースコード分析

Deep Dive: Ubuntu OverlayFS Inode Copy-Up Privilege Escalation Teardown →

Review the exact C source patch showing how Ubuntu's custom ovl_do_setxattr bypassed security checks when handling privileged capabilities.

← セキュリティディレクトリ一覧すべてのセキュリティ更新情報 →