CVE-2016-1575

High

Published: 02/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The overlayfs implementation in the Linux kernel through version 4.5.2 does not properly maintain POSIX ACL xattr data, allowing local users to gain privileges by leveraging a group-writable setgid directory.

Risk Assessment

Local users may gain unauthorized privileges, potentially leading to privilege escalation and security breaches.

Recommendation

It is recommended to update the Linux kernel to version 4.5.3 or later to mitigate this vulnerability.

Other vulnerabilities in overlayfs w jądrze Linux

CVE-2015-1328High
The overlayfs implementation in the Linux kernel before version 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory. This allows local users to gain root access by leveraging a configuration where overlayfs is permitted in an arbitrary mount namespace.

Original NVD description (English source)

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.