CVE-2016-2853 | BDVDB-2026-75627 Detail

Description#

The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/96839
http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/
http://www.openwall.com/lists/oss-security/2016/02/24/9
https://sourceforge.net/p/aufs/mailman/message/34864744/
http://www.openwall.com/lists/oss-security/2021/10/18/1

Exploit#

No public exploit known

History#

Version 12016-05-02Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.