cve.bz

CVE-2021-3493

7.8 highKEVEPSS 49%

High (7.8) in Linux Kernel. In CISA KEV since 2022-10-20. EPSS 49% chance of exploitation in the next 30 days.

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
49% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2022-10-20, due 2022-11-10
CWEs
CWE-863, CWE-270
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON