CVEvulnerability

CVE-2016-1576

7.8 HIGH Published 2016-05-02 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2016-05-02
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

Affected configurations

• canonical ubuntu core 15.04 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.10 • canonical ubuntu linux 16.04 • canonical ubuntu linux 16.10 • canonical ubuntu touch 15.04 • linux linux kernel (<= 4.5.2)

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360 Mailing List, Patch, Vendor Advisory
http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1576.html Third Party Advisory
http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/ Exploit, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/24/8 Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/10/18/1 Mailing List, Third Party Advisory
https://bugs.launchpad.net/bugs/1535150 Third Party Advisory
https://launchpadlibrarian.net/235300093/0005-overlayfs-Be-more-careful-about-copying-up-sxid-file.patch Mailing List, Patch, Third Party Advisory
https://launchpadlibrarian.net/235300225/0006-overlayfs-Propogate-nosuid-from-lower-and-upper-moun.patch Mailing List, Patch, Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360 Mailing List, Patch, Vendor Advisory
http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1576.html Third Party Advisory
http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/ Exploit, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/24/8 Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/10/18/1 Mailing List, Third Party Advisory
https://bugs.launchpad.net/bugs/1535150 Third Party Advisory
https://launchpadlibrarian.net/235300093/0005-overlayfs-Be-more-careful-about-copying-up-sxid-file.patch Mailing List, Patch, Third Party Advisory
https://launchpadlibrarian.net/235300225/0006-overlayfs-Propogate-nosuid-from-lower-and-upper-moun.patch Mailing List, Patch, Third Party Advisory