CVE-2015-8660
MEDIUMOverlayfs Privilege Escalation
Title source: metasploitDescription
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
Exploits (7)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocallinux
https://www.exploit-db.com/exploits/40688
metasploit
WORKING POC
GOOD
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb
References (23)
... and 3 more
Scores
CVSS v3
6.7
EPSS
0.6346
EPSS Percentile
98.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-264
Status
draft
Affected Products (1)
linux/linux_kernel
< 3.18.31
Timeline
Published
Dec 28, 2015
Tracked Since
Feb 18, 2026