CVE-2016-1576

HIGH

Linux kernel <4.5.2 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-1576. PoCs published by halfdog.

AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in Ubuntu Wily by mounting a FUSE filesystem with a SUID binary, then using overlayfs to trigger a copy_up operation that creates a real SUID binary. The PoC includes custom C programs to demonstrate the attack chain.

Description

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

Exploits (1)

exploitdb WORKING POC
by halfdog · textlocallinux
https://www.exploit-db.com/exploits/41763

This exploit leverages a privilege escalation vulnerability in Ubuntu Wily by mounting a FUSE filesystem with a SUID binary, then using overlayfs to trigger a copy_up operation that creates a real SUID binary. The PoC includes custom C programs to demonstrate the attack chain.

Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: Ubuntu Wily with overlayfs and FUSE
No auth needed
Prerequisites: User namespace access · FUSE mount capabilities · Overlayfs support
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Third Party Advisory x_refsource_confirm
https://bugs.launchpad.net/bugs/1535150
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/02/24/8
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2021/10/18/1

Scores

CVSS v3 7.8
EPSS 0.0106
EPSS Percentile 60.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (8)
canonical/ubuntu_core 15.04
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 15.10
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 16.10
canonical/ubuntu_touch 15.04
linux/linux_kernel < 4.5.2
Published May 02, 2016
Tracked Since Feb 18, 2026