Security Advisory
CVE-2015-8660
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.