CVE-2021-3847
Publication date 1 April 2022
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.
Status
Package | Ubuntu Release | Status |
---|---|---|
linux | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Ignored was needs-triage ESM criteria | |
14.04 LTS trusty | Ignored was needs-triage ESM criteria | |
linux-aws | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Ignored was needs-triage ESM criteria | |
14.04 LTS trusty | Ignored was needs-triage ESM criteria | |
linux-aws-5.0 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored superseded by linux-aws-5.3 | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-aws-5.11 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-aws-5.13 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-aws-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-aws-5.3 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored superseded by linux-aws-5.4 | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-aws-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-aws-5.8 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-aws-hwe | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Ignored was needs-triage ESM criteria | |
14.04 LTS trusty | Not in release | |
linux-azure | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Ignored superseded by linux-azure-5.3 | |
16.04 LTS xenial | Ignored was needs-triage ESM criteria | |
14.04 LTS trusty | Ignored was needs-triage ESM criteria | |
linux-azure-4.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-5.11 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-5.13 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-5.3 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored superseded by linux-azure-5.4 | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-5.8 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-edge | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored superseded by linux-azure-5.3 | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-fde | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-azure-fde-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-bluefield | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-dell300x | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of standard support | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gcp | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Ignored superseded by linux-gcp-5.3 | |
16.04 LTS xenial | Ignored was needs-triage ESM criteria | |
14.04 LTS trusty | Not in release | |
linux-gcp-4.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gcp-5.11 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gcp-5.13 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gcp-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gcp-5.3 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored superseded by linux-gcp-5.4 | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gcp-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gcp-5.8 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gke | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Ignored end of standard support | |
14.04 LTS trusty | Not in release | |
linux-gke-4.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of life, was needs-triage | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gke-5.0 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of standard support, was needs-triage | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gke-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gke-5.3 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of standard support, was needs-triage | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gke-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of life, was needs-triage | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gkeop | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-gkeop-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of life, was needs-triage | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-hwe | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored replaced by linux-hwe-5.4 | |
16.04 LTS xenial | Ignored was needs-triage ESM criteria | |
14.04 LTS trusty | Not in release | |
linux-hwe-5.11 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-hwe-5.13 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-hwe-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-hwe-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-hwe-5.8 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-hwe-edge | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored superseded by linux-hwe-5.4 | |
16.04 LTS xenial | Ignored superseded by linux-hwe | |
14.04 LTS trusty | Not in release | |
linux-ibm | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-ibm-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of standard support | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-intel-5.13 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-intel-iotg | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-intel-iotg-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-kvm | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Ignored was needs-triage ESM criteria | |
14.04 LTS trusty | Not in release | |
linux-lowlatency | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-lowlatency-hwe-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-lts-xenial | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Ignored was needs-triage ESM criteria | |
linux-oem | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of life, was needs-triage | |
16.04 LTS xenial | Ignored end of standard support | |
14.04 LTS trusty | Not in release | |
linux-oem-5.10 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oem-5.13 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oem-5.14 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oem-5.17 | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oem-5.6 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oem-6.0 | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oem-osp1 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of standard support, was needs-triage | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oracle | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Ignored was needs-triage ESM criteria | |
14.04 LTS trusty | Not in release | |
linux-oracle-5.0 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored superseded by linux-oracle-5.3 | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oracle-5.11 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oracle-5.13 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oracle-5.15 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oracle-5.3 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored superseded by linux-oracle-5.4 | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oracle-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-oracle-5.8 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-raspi | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored overlayfs is working as intended | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-raspi-5.4 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored overlayfs is working as intended | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-raspi2 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored replaced by linux-raspi | |
18.04 LTS bionic | Ignored end of standard support | |
16.04 LTS xenial | Ignored end of standard support, was needs-triage | |
14.04 LTS trusty | Not in release | |
linux-raspi2-5.3 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of standard support, was needs-triage | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-riscv | ||
22.04 LTS jammy | Ignored overlayfs is working as intended | |
20.04 LTS focal | Ignored superseded by linux-riscv-5.8 | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-riscv-5.11 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-riscv-5.8 | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Ignored end of life, was needs-triage | |
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
linux-snapdragon | ||
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored end of standard support | |
16.04 LTS xenial | Ignored end of standard support, was needs-triage | |
14.04 LTS trusty | Not in release |
Notes
sbeattie
Miklos, a primary maintainer for overlayfs, asserts in the SUSE bug that this is a misunderstanding of how overlayfs operates.
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.8 · High |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |