cve/2016/CVE-2016-1575.md

CVE-2016-1575

Description

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.

POC

Reference

• http://www.halfdog.net/Security/2016/UserNamespaceOverlayfsXattrSetgidPrivilegeEscalation/
• https://launchpad.net/bugs/1534961

Github

No PoCs found on GitHub currently.