<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">CVE-2018-6559</DocumentTitle>
  <DocumentType>SUSE CVE</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE CVE-2018-6559</ID>
    </Identification>
    <Status>Interim</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>24</Number>
        <Date>2023-01-19T02:03:35Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-05-30T14:10:47Z</InitialReleaseDate>
    <CurrentReleaseDate>2023-01-19T02:03:35Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf-cve.pl</Engine>
      <Date>2020-12-27T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="CVE" Type="Summary" Ordinal="1" xml:lang="en">CVE-2018-6559</Note>
    <Note Title="Mitre CVE Description" Type="Description" Ordinal="2" xml:lang="en">The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="4" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SLES for SAP Applications 11 SP3">
      <Branch Type="Product Name" Name="SLES for SAP Applications 11 SP3">
        <FullProductName ProductID="SLES for SAP Applications 11 SP3" CPE="cpe:/o:suse:suse_sles_sap:11:sp3">SLES for SAP Applications 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP3" CPE="cpe:/o:suse:sled:12:sp3">SUSE Linux Enterprise Desktop 12 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15" CPE="cpe:/o:suse:sle-module-basesystem:15">SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
      </Branch>
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Development Tools 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15" CPE="cpe:/o:suse:sle-module-development-tools:15">SUSE Linux Enterprise Module for Development Tools 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15" CPE="cpe:/o:suse:sle-module-basesystem:15">SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
      </Branch>
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Development Tools 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15" CPE="cpe:/o:suse:sle-module-development-tools:15">SUSE Linux Enterprise Module for Development Tools 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP1 for Teradata">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP1 for Teradata">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP1 for Teradata" CPE="cpe:/o:suse:suse_sles_teradata:11:sp1">SUSE Linux Enterprise Server 11 SP1 for Teradata</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP3 LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP3 LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3 LTSS" CPE="cpe:/o:suse:suse_sles_ltss:11:sp3">SUSE Linux Enterprise Server 11 SP3 LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP3 for Teradata">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP3 for Teradata">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3 for Teradata" CPE="cpe:/o:suse:suse_sles_teradata:11:sp3">SUSE Linux Enterprise Server 11 SP3 for Teradata</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP4-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS" CPE="cpe:/o:suse:suse_sles:11:sp4">SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP2-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP2-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-LTSS" CPE="cpe:/o:suse:sles-ltss:12:sp2">SUSE Linux Enterprise Server 12 SP2-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3" CPE="cpe:/o:suse:sles:12:sp3">SUSE Linux Enterprise Server 12 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12-LTSS" CPE="cpe:/o:suse:sles-ltss:12">SUSE Linux Enterprise Server 12-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15" CPE="cpe:/o:suse:sle-module-basesystem:15">SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
      </Branch>
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Development Tools 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15" CPE="cpe:/o:suse:sle-module-development-tools:15">SUSE Linux Enterprise Module for Development Tools 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12" CPE="cpe:/o:suse:sles_sap:12">SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2" CPE="cpe:/o:suse:sles_sap:12:sp2">SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15" CPE="cpe:/o:suse:sle-module-basesystem:15">SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
      </Branch>
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Development Tools 15">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15" CPE="cpe:/o:suse:sle-module-development-tools:15">SUSE Linux Enterprise Module for Development Tools 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default">
      <FullProductName ProductID="kernel-default" CPE="cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*">kernel-default</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base">
      <FullProductName ProductID="kernel-default-base" CPE="cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*">kernel-default-base</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel">
      <FullProductName ProductID="kernel-default-devel">kernel-default-devel</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-extra">
      <FullProductName ProductID="kernel-default-extra">kernel-default-extra</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-man">
      <FullProductName ProductID="kernel-default-man">kernel-default-man</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-devel">
      <FullProductName ProductID="kernel-devel" CPE="cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*">kernel-devel</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-macros">
      <FullProductName ProductID="kernel-macros">kernel-macros</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source">
      <FullProductName ProductID="kernel-source" CPE="cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*">kernel-source</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SLES for SAP Applications 11 SP3">
      <FullProductName ProductID="SLES for SAP Applications 11 SP3:kernel-default">kernel-default as a component of SLES for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SLES for SAP Applications 11 SP3">
      <FullProductName ProductID="SLES for SAP Applications 11 SP3:kernel-source">kernel-source as a component of SLES for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP3:kernel-default">kernel-default as a component of SUSE Linux Enterprise Desktop 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP3:kernel-default-devel">kernel-default-devel as a component of SUSE Linux Enterprise Desktop 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-extra" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP3:kernel-default-extra">kernel-default-extra as a component of SUSE Linux Enterprise Desktop 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP3:kernel-devel">kernel-devel as a component of SUSE Linux Enterprise Desktop 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP3:kernel-macros">kernel-macros as a component of SUSE Linux Enterprise Desktop 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP3:kernel-source">kernel-source as a component of SUSE Linux Enterprise Desktop 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:kernel-default">kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:kernel-default-base">kernel-default-base as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:kernel-default-devel">kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:kernel-default-man">kernel-default-man as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:kernel-devel">kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:kernel-macros">kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15:kernel-source">kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Development Tools 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15:kernel-default">kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Development Tools 15">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15:kernel-source">kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP1 for Teradata">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP1 for Teradata:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP1 for Teradata">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP1 for Teradata:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3 LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3 LTSS:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server 11 SP3 LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3 LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3 LTSS:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server 11 SP3 LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3 for Teradata">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3 for Teradata:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3 for Teradata">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3 for Teradata:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base">kernel-default-base as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel">kernel-default-devel as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man">kernel-default-man as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server 12 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base">kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel">kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man">kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel">kernel-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros">kernel-macros as a component of SUSE Linux Enterprise Server 12 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server 12 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3:kernel-default-base">kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3:kernel-default-devel">kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3:kernel-default-man">kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3:kernel-devel">kernel-devel as a component of SUSE Linux Enterprise Server 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3:kernel-macros">kernel-macros as a component of SUSE Linux Enterprise Server 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12-LTSS:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server 12-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12-LTSS:kernel-default-base">kernel-default-base as a component of SUSE Linux Enterprise Server 12-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12-LTSS:kernel-default-devel">kernel-default-devel as a component of SUSE Linux Enterprise Server 12-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12-LTSS:kernel-default-man">kernel-default-man as a component of SUSE Linux Enterprise Server 12-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12-LTSS:kernel-devel">kernel-devel as a component of SUSE Linux Enterprise Server 12-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12-LTSS:kernel-macros">kernel-macros as a component of SUSE Linux Enterprise Server 12-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12-LTSS:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server 12-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default">kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base">kernel-default-base as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel">kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel">kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros">kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source">kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.</Note>
    </Notes>
    <CVE>CVE-2018-6559</CVE>
    <ProductStatuses>
      <Status Type="Known Not Affected">
        <ProductID>SLES for SAP Applications 11 SP3:kernel-default</ProductID>
        <ProductID>SLES for SAP Applications 11 SP3:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP3:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP3:kernel-default-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP3:kernel-default-extra</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP3:kernel-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP3:kernel-macros</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP3:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:kernel-default-base</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:kernel-default-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:kernel-default-man</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:kernel-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:kernel-macros</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP1 for Teradata:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP1 for Teradata:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3 LTSS:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3 LTSS:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3 for Teradata:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3 for Teradata:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3:kernel-default-base</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3:kernel-default-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3:kernel-default-man</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3:kernel-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3:kernel-macros</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12-LTSS:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12-LTSS:kernel-default-base</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12-LTSS:kernel-default-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12-LTSS:kernel-default-man</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12-LTSS:kernel-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12-LTSS:kernel-macros</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12-LTSS:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>3.3</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
  </Vulnerability>
</cvrfdoc>
