$ cve CVE-2015-8660 JSON

CVE-2015-8660 EXPLOIT

6.7

MEDIUM · CVSS 3.1 · EPSS 22.2% (pctl 98)

Patch early

A public exploit exists.

Description

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.

Scoring

CVSS	6.7 (MEDIUM, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS	22.2% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-264
On CISA KEV	no
Public exploit	yes
Published	2015-12-28
Last modified	2026-06-17

Affected (1)

Vendor	Product
linux	linux kernel

Public exploits

Source	Title	Date
exploit-db	Linux Kernel (Ubuntu / Fedora / RedHat) - 'Overlayfs' Local Privilege Escalation (Metasploit)	2016-11-02
exploit-db	Linux Kernel 4.3.3 - 'overlayfs' Local Privilege Escalation (2)	2016-01-12
exploit-db	Linux Kernel 4.3.3 (Ubuntu 14.04/15.10) - 'overlayfs' Local Privilege Escalation (1)	2016-01-05

References

→ the Explorer · watch your stack · NVD