high7.8
CVE-2021-3847
An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a c…
Impact
An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | through 5.17.0 |
| Fedoraproject | Fedora | Version 34 |