Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws

[Corrine]

From Bleeping Computer at Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws:

 

Two Linux vulnerabilities introduced recently into the Ubuntu kernel create the potential for unprivileged local users to gain elevated privileges on a massive number of devices.

Ubuntu is one of the most widely used Linux distributions, especially popular in the U.S., having an approximate user base of over 40 million.

Two recent flaws tracked as CVE-2023-32629 and CVE-2023-2640 discovered by Wiz's researchers S. Tzadik and S. Tamari were recently introduced into the operating system, impacting roughly 40% of Ubuntu's userbase.

 

Additional information at the referenced article.

[V.T. Eric Layton]

The more popular (number of users) the OS, the BIGGER the target stapled to their backs...

 

[crp]

the "introduced recently" had me puzzled, seems it should be "discovered recently".

 

The way mounts are handled , especially over a LAN , in Linux always had me a bit queasy security wise.