NetSight
IP …
high7.8Public exploit code

CVE-2016-1576

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by m…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

Affected products

VendorProductAffected versions
CanonicalUbuntu Core
Version 15.04
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04, 16.10
CanonicalUbuntu Touch
Version 15.04
LinuxLinux Kernel
through 4.5.2

References