CVE-2019-15793

CVE-2019-15793 is a high-severity vulnerability affecting the shiftfs component in specific Ubuntu 5.0 and 5.3 Linux kernel series. It stems from incorrect user/group ID translation during operations in the lower filesystem, leading to the use of unintended IDs. This flaw could allow a local attacker to bypass discretionary access control permissions. The vulnerability carries a CVSS score of 8.8 (High), indicating a local attack vector with low complexity and potential for high impact on confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, an exploit (EDB-47693) exists for Ubuntu 19.10, demonstrating its exploitability. Despite the existence of an exploit, there is no evidence of active exploitation, nor is there significant community discussion or media coverage surrounding this CVE.