CVE-2016-1575: High severity linux kernel vulnerability
Published May 2, 2016
·Updated
Last updated 24 July 2024
Other sources
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
Affected Software
9 affected componentsFixes available
Linux Linux kernel<=4.5.2
Canonical Ubuntu Core=15.04
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.10
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=16.10
Canonical Ubuntu Touch=15.04
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
May 2, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:15 PM
Description
Sep 20, 2024
Data Sourced
via Ubuntu·01:13 AM
RemedyDescriptionSeverityAffected Software
Apr 28, 2025
Data Sourced
via Debian·03:27 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2016-1575.
2
What is the affected software for this vulnerability?
The affected software includes the Linux kernel versions 3.13.0-79.123, 3.19.0-51.57, and 4.2.0-30.35.
3
What is the description of this vulnerability?
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
4
How severe is CVE-2016-1575?
The severity of CVE-2016-1575 is moderate.
5
How do I fix CVE-2016-1575?
To fix CVE-2016-1575, update the Linux kernel to version 4.5.3 or later.