Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-3493

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. D

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubuntu linux kernel

  • 5.8 kernel to < 5.8.0-50.56affected
  • 5.4 kernel to < 5.4.0-72.80affected
  • 4.15 kernel to < 4.15.0-142.146affected
  • 4.4 kernel to < 4.4.0-209.241affected

References