Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2021-3493

Linux Kernel Privilege Escalation Vulnerability

Description

The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 10 Nov 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.