CVE-2018-6559

The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.

• CWE-200
• CWE-200

• http://www.securityfocus.com/bid/105752Third Party Advisory, VDB Entry
• https://launchpad.net/bugs/1793458Exploit, Issue Tracking, Third Party Advisory
• https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.htmlThird Party Advisory
• https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.htmlThird Party Advisory
• https://usn.ubuntu.com/3832-1/Third Party Advisory
• https://usn.ubuntu.com/3833-1/Third Party Advisory
• https://usn.ubuntu.com/3835-1/Third Party Advisory
• https://usn.ubuntu.com/3836-1/Third Party Advisory
• https://usn.ubuntu.com/3836-2/Third Party Advisory
• http://www.securityfocus.com/bid/105752Third Party Advisory, VDB Entry
• https://launchpad.net/bugs/1793458Exploit, Issue Tracking, Third Party Advisory
• https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.htmlThird Party Advisory
• https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.htmlThird Party Advisory
• https://usn.ubuntu.com/3832-1/Third Party Advisory
• https://usn.ubuntu.com/3833-1/Third Party Advisory
• https://usn.ubuntu.com/3835-1/Third Party Advisory
• https://usn.ubuntu.com/3836-1/Third Party Advisory
• https://usn.ubuntu.com/3836-2/Third Party Advisory

Published

Oct 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6553The CUPS AppArmor profile incorrectly confined the dnssd bac…
• CVE-2018-6554Memory leak in the irda_bind function in net/irda/af_irda.c …
• CVE-2018-6555The irda_setsockopt function in net/irda/af_irda.c and later…
• CVE-2018-6556lxc-user-nic when asked to delete a network interface will u…
• CVE-2018-6557The MOTD update script in the base-files package in Ubuntu 1…7
• CVE-2018-6558The pam_fscrypt module in fscrypt before 0.2.4 may incorrect…
• CVE-2018-6560In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0…
• CVE-2018-6561dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload …
• CVE-2018-6562totemomail Encryption Gateway before 6.0_b567 allows remote …
• CVE-2018-6563Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2018-6569West Wind Web Server 6.x does not require authentication for…
• CVE-2018-6574Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-rele…