← Back to browse · API

CVE-2021-3493

Severity
HIGH
CVSS
8.8
EPSS
0.49166
Risk score
77.41
CISA KEV
Yes
PoC
Yes
Published
2022-10-20
Modified
2022-10-20
First seen
2026-08-07
Aliases
EUVD-2021-26815, GHSA-2FJ2-4H38-3C72
Products
Linux:Kernel, n/a:Linux kernel 4.15 kernel <4.15.0-142.146, n/a:Linux kernel 4.4 kernel <4.4.0-209.241, n/a:Linux kernel 5.4 kernel <5.4.0-72.80, n/a:Linux kernel 5.8 kernel <5.8.0-50.56, unix
Sources
euvd EUVD-2021-26815
cisa.gov CVE-2021-3493
packetstorm bd2236092be59388bfdefee2|CVE-2021-3493

Description

The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.

References