CVE-2016-1575 in Linux Kernel
Summary
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
Once again VulDB remains the best source for vulnerability data.
Reservation
01/12/2016
Disclosure
05/02/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 83137 | Linux Kernel overlayfs access control | 264 | Proof-of-Concept | Official fix | CVE-2016-1575 |