CVE-2021-3847CWE-281

An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a…

published April 1, 2022

CVSS
—
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00464 · 39.3th percentile
Weakness
CWE-281 · Improper Preservation of Permissions
Published
2022-04-01T22:17Z
EPSS history
Timeline
  • 01 APR 22:17Z
    An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a…
    cvelistv5