CVE-2016-1575

Published: May 2, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360

x_refsource_MISC

http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1575.html

x_refsource_CONFIRM

https://launchpad.net/bugs/1534961

x_refsource_CONFIRM

http://www.halfdog.net/Security/2016/UserNamespaceOverlayfsXattrSetgidPrivilegeEscalation/

x_refsource_MISC

[oss-security] 20160224 User Namespaces Overlayfs Xattr Setgid Privilege Escalation: Overlayfs

mailing-list

x_refsource_MLIST

[oss-security] 20211018 Re: CVE-2021-3847: OverlayFS - Potential Privilege Escalation using overlays copy_up

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2016-1575

Description

Affected Products

References