CVE-2018-16597: Medium severity linux kernel vulnerability
Published Sep 21, 2018
·Updated
An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.
Affected Software
4 affected components
Linux Linux kernel<4.8
NetApp Active Iq Performance Analytics Services
NetApp Element Software
openSUSE Leap=42.3
Remediation
Patch Available
Patch Available
Event History
Sep 21, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-16597?
CVE-2018-16597 has a medium severity rating due to potential local privilege escalation.
2
How do I fix CVE-2018-16597?
To fix CVE-2018-16597, update the Linux kernel to version 4.8 or later.
3
Who is affected by CVE-2018-16597?
CVE-2018-16597 affects versions of the Linux kernel prior to 4.8 and certain NetApp products.
4
What are the implications of CVE-2018-16597 for local attackers?
Local attackers can exploit CVE-2018-16597 to gain unauthorized access to files on the underlying filesystem.
5
What systems are at risk from CVE-2018-16597?
Systems running vulnerable versions of the Linux kernel, as well as some NetApp software, are at risk from CVE-2018-16597.