Security Advisory

CVE-2016-1575

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-05-02 10:00:00
Last updated 2024-08-05 23:02:12
Assigner canonical
CVSS score not scored
State PUBLISHED

Description

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.