CVE-2016-1575

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p58

Published

May 2, 2016 (May 2, 2016)

Modified

Jun 17, 2026

Description

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.

Vendors: linux canonical
Products: linux kernel, ubuntu core, ubuntu linux, ubuntu touch
Weakness: CWE-269
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.