NetSight
IP …
medium6.7Public exploit code

CVE-2015-8660

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to b…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.18 before 3.18.31
from 3.19 before 4.1.22
from 4.2 before 4.4

Weakness classification

CWE-264

References