The most important flaw patched in this new Ubuntu kernel security update is CVE-2021-3178, which was discovered in Linux kernel’s NFS implementation and affects the Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS releases. This could allow a remote attacker to bypass NFS access restrictions and traverse to other parts of the filesystem via READDIRPLUS when there’s an NFS export of a subdirectory of a file system.

Read full article on Linux Today