CVE-2016-2854

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x through 4.x

Description The issue concerns the aufs module in the Linux kernel, which fails to properly maintain POSIX ACL xattr data. This allows local users to gain privileges by exploiting a group-writable setgid directory.

Recommendations For Linux kernel versions 3.x through 4.x, consider restricting access to group-writable setgid directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.